Debian Weekly News - June 27th, 2000
--------------------------------------------------------------------------
Debian Weekly News
http://www.debian.org/News/weekly/current/issue/
Debian Weekly News - June 27th, 2000
--------------------------------------------------------------------------
Welcome to Debian Weekly News, a newsletter for the Debian developer
community.
Test Cycle 2 [8]is over and the archive is being [9]updated in
preparation for the next test cycle. The release manager and others
have been aggressively downgrading and fixing RC bugs, as well as
removing some packages, the result is [10]less than 40 RC bugs remain
open, a record low. Of course, the big question is: Will the third
Test Cycle be the last? Only time will tell, but confidence is [11]on
the rise.
Upgrading from 1.3 to frozen. Many [12]install and upgrade reports
have been posted in the past couple of weeks, but [13]this one stands
out. It's an upgrade from a system running Debian 1.3 all the way to
frozen in one step, and it worked fine except one small and documented
glitch. "Thanks and big kudos to all Debian: it is quite uncommon that
an operating system may upgrade like this (consider also that it
passed from a libc5 to a libc6 arch... and it took just 45 minutes)"
This week's security fixes:
* An [14]updated X was installed into frozen, fixing a denial of
service attack, a symlink attack, and 4 security holes in Xlib.
* A remote root exploit in wu-ftpd has been [15]fixed. Note that
"the default configuration in all current Debian packages prevents
the currently available exploits in the case of anonymous access,
although local users could still possibly compromise the server."
* A remote root exploit in dhcp-client-beta and dhcp-client has also
been [16]fixed.
More Debian-based distributions. [17]AMIRIX Linux is a Debian-based
distribution aimed at the embedded Linux space. AMIRIX is the
principal sponsor of the [18]Embedded Debian Project, which aims to
"make Debian GNU/Linux a natural choice for embedded Linux." "This is
an independent project, and is not formally associated with Debian. We
plan on working closely with Debian, with the goal of our work
eventually being integrated into the mainstream. " The project was
announced to the debian-devel mailing list back in May, but Debian
Weekly News missed [19]the announcement, which gives some background
information.
Freshmeat will be hosting an unofficial .deb archive, called the Deb
Freshmeat Repository. The plans for this archive are to provide a
central location for unofficial packages. "With the recent hubbub over
KDE/QPL, the talk of removal of non-free, multiple .deb using
distributions and the multitude of unofficial aptable and non-aptable
sites with .debs the time is ripe." Seth Cohn has provided a
[20]summary of the discussions on the debian-freshmeat list.
_________________________________________________________________
References
8. http://www.debian.org/Lists-Archives/debian-release-0006/msg00048.html
9. http://www.debian.org/Lists-Archives/debian-devel-announce-0006/msg00012.html
10. http://bugs.debian.org/~wakkerma/bugs/
11. http://www.debian.org/Lists-Archives/debian-devel-0006/msg01941.html
12. http://www.debian.org/Lists-Archives/debian-testing-0006/threads.html
13. http://www.debian.org/Lists-Archives/debian-devel-0006/msg01830.html
14. http://www.debian.org/Lists-Archives/debian-devel-changes-0006/msg01023.html
15. http://www.debian.org/security/2000/20000619
16. http://www.debian.org/News/weekly/current/issue/mail#2
17. http://www.amirixlinux.com/
18. http://www.emdebian.org/
19. http://www.debian.org/Lists-Archives/debian-devel-0005/msg00294.html
20. http://www.debian.org/News/weekly/current/issue/mail#1
--
see shy jo
Reply to: