[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Debian Weekly News - July 19th, 2000



---------------------------------------------------------------------------
Debian Weekly News
http://www.debian.org/News/weekly/current/issue/
Debian Weekly News - July 19th, 2000
---------------------------------------------------------------------------
                                    
Welcome to Debian Weekly News, a newsletter for the Debian community.

A quick release status update: The release managers are [1]back, and
fixed packages are moving into frozen again. We have still not entered
the third test cycle. [2]Here is a short list of things that are
holding it up.

Security fixes. A [3]remote root exploit in the rpc.statd program
from nfs-common was found and fixed this week. This effects potato and
woody only, not stable, and an immediate upgrade is recommended. A fix
was also released for a remote shell exploit [4]in cvsweb.

The debian-policy list, which has been mostly inactive for a while, is
waking back up. A [5]new release of the policy manual might happen
sometime soon. The [6]current hot topic is adding new fields to
Debian packages, to allow use of third party bug tracking systems, and
mark the origin of a package. Few would dispute that such things are
increasingly needed as third party Debian packages proliferate, but
exactly how they should be implemented is a matter of some debate.

Last week this newsletter ran a brief notice about a proposal to
remove libc5 support packages from unstable. The discussion was only
beginning then; now people have had a week to object to the idea. Most
objections however, do not take into account the fact that removing
libc5 support from unstable will not remove existing libc5 packages
from their machines, and libc5 support packages will [7]still be
available from the [8]debian archives. There were some valid worries
though. What if we drop libc5 support and then changes to the linker
make the old and unsupported libc5 packages [9]stop working? To
address this, we might keep libc5 itself in unstable, but remove all
the other libc5 compatibility libraries and development support -- a
[10]compromise that seems to satisfy everyone.

The libc5 discussion then expanded into a more [11]general discussion
about whether we should "limit upgradability to two major releases
back". Recently there have been successful upgrades from Debian 1.3 to
frozen, skipping two major releases. This is a fine accomplishment,
but making it work does take a lot of effort, and require a
significant amount of cruft in the distribution. Would our time be
better spent on improving other things? No resolution on this one yet.

New packages in Debian unstable this week include the following:
  * [12]dvipdfm: DVI to PDF translator
  * gnocatan: an emulation of the Settlers of Catan board game which
    can be played over the internet. ([13]client, [14]data, [15]help,
    [16]server)
  * [17]grdb: sets your Xresources from your gtk theme
  * [18]transformiix: a fast standalone XSLT processor

---------------------------------------------------------------------------
References
  1. http://www.debian.org/Lists-Archives/debian-release-0007/msg00008.html
  2. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00913.html
  3. http://www.debian.org/Lists-Archives/debian-security-announce-00/msg00019.html
  4. http://www.debian.org/Lists-Archives/debian-security-announce-00/msg00018.html
  5. http://www.debian.org/Lists-Archives/debian-policy-0007/msg00050.html
  6. http://www.debian.org/Lists-Archives/debian-policy-0007/msg00074.html
  7. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00527.html
  8. ftp://archive.debian.org/debian-archive/dists/
  9. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00565.html
  10. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00531.html
  11. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00548.html
  12. http://www.debian.org/Packages/unstable/tex/dvipdfm.html
  13. http://www.debian.org/Packages/unstable/games/gnocatan-client.html
  14. http://www.debian.org/Packages/unstable/games/gnocatan-data.html
  15. http://www.debian.org/Packages/unstable/games/gnocatan-help.html
  16. http://www.debian.org/Packages/unstable/games/gnocatan-server.html
  17. http://www.debian.org/Packages/unstable/x11/grdb.html
  18. http://www.debian.org/Packages/unstable/text/transformiix.html

-- 
see shy jo



Reply to: