Debian Weekly News - November 8th, 2005
---------------------------------------------------------------------------
Debian Weekly News
http://www.debian.org/News/weekly/2005/45/
Debian Weekly News - November 8th, 2005
---------------------------------------------------------------------------
Welcome to this year's 45th issue of DWN, the weekly newsletter for
the Debian community. Nathanael Nerode [1]tried to solve some of the
problems in KDE packages in testing, due to various transitions and
fixes. In Florida 150 defendants perhaps will be acquitted because a
breathalyser company [2]refused to turn over the source code of their
device despite of a judge's order.
1. http://lists.debian.org/debian-release/2005/10/msg00284.html
2. http://www.groklaw.net/article.php?story=20051105125531161
Participating in the GPLv3 Process. Florian Weimer [3]wondered if the
Debian project or [4]Software in the Public Interest, Inc. is
participating in the creation process for the new [5]General Public
License. He believes that Debian should be involved to ensure that
license compatibility does not decrease substantially, and that things
like the purported anti-DRM clauses remain practical.
3. http://lists.debian.org/debian-project/2005/11/msg00035.html
4. http://www.spi-inc.org/
5. http://www.fsf.org/news/gplv3
Linux-Info-Tag Dresden Event Report. [6]Meike Reichle and
[7]Alexander Schmehl wrote reports about the [8]Linux-Info-Tag
exhibition and conference that took place in Dresden, Germany at the
end of last month. Members of the Debian project ran a booth and gave
several talks there. The booth was ran together with people from
[9]debianforum.de.
6. http://youam.de/~alphascorpii/blog/2005/10/31#linux-info-tag
7. http://blog.schmehl.info/Debian/linux-info-tag-2005
8. http://www.debian.org/events/2005/1029-lit-dresden
9. http://www.debianforum.de/
Debian GNU/kFreeBSD Live CD. Robert Millan [10]announced version 1.0
of Ging, the only live distribution based on [11]Debian GNU/kFreeBSD.
[12]Ging is using [13]KDE 3.4 as its desktop environment and
[14]includes a mixture of KDE and GNOME applications such as
Konqueror, GIMP, KOffice, Gaim and others.
10. http://lists.alioth.debian.org/pipermail/glibc-bsd-devel/2005-November/000624.html
11. http://www.debian.org/ports/kfreebsd-gnu
12. http://lists.debian.org/debian-bsd/2005/08/msg00041.html
13. http://www.kde.org/
14. http://glibc-bsd.alioth.debian.org/ging/screenshots/ging_0.1.0.rc1.png
Creating SSL Certificates on Debian. A user [15]documented the
creation and use of self signed SSL certificates to prevent browsers
from complaining about the certificates and describes in detail how
SSL certificates and a certification authority (CA) are created.
Distributing the CA certificate and configuring Apache to use the
newly created key and certificate are also described.
15. http://www.debian-administration.org/articles/284
Debian Conference: Call for Papers. Andreas Schuldei [16]called for
papers for potential presentation to be given at this year's
[17]Debian Conference which will take place from the 14 May to the
22th 2006 in Oaxtepec, Mexico. Proposals will be accepted until
December 6th, 23h59 UTC, reviewed by the committee and accepted talks
will be published on December 20th.
16. http://lists.debian.org/debian-devel-announce/2005/11/msg00003.html
17. http://www.debconf.org/
Debian at Systems Exhibition. Erich Schubert [18]reported about the
Debian presence at this year's [19]Systems exhibition which was
organised and staffed by only a small number of Debian people. A few
people stopped by at the booth the morning he was around and asked
high-quality questions. More project members are needed for next
year's event.
18. http://blog.drinsama.de/erich/en/linux/2005102902-debian-booth-on-systems
19. http://www.debian.org/events/2005/1024-systems
Closing Bugs as Submitter? Jan Nordholz [20]wondered if it is desired
and possible to close ones own bug reports if they have been dealt
with accidently by a new upstream version or similar. Jeroen van
Wolffelaar [21]proposed to write add an explanation to the bug report
and let the maintainer deal with it. Henning Makholm [22]explained
that closing the bug report with the proper version pseudo-header is
the preferred method since version tracking is implemented.
20. http://lists.debian.org/debian-devel/2005/10/msg00639.html
21. http://lists.debian.org/debian-devel/2005/10/msg00640.html
22. http://lists.debian.org/debian-devel/2005/10/msg00644.html
Popular Debian Architectures. Petter Reinholdtsen [23]reported about
an increased visibility of non-x86 architectures in the [24]popularity
contest. The list of packages used around the globe is relevant
information that helps ordering the packages on the CDs, to make sure
the most popular packages end up on the first CDs.
23. http://lists.debian.org/debian-devel/2005/10/msg00651.html
24. http://popcon.debian.org/
Digital Key Revocation. Roberto Sanchez [25]wondered when he should
revoke his old GnuPG key since he has created a new one but all of his
former Debian work is signed with the old one, of course. Christoph
Berg [26]explained that he doesn't need to care about the Debian
archive since his packages carry the sponsor's signatures as the old
key is not included in the Debian keyring.
25. http://lists.debian.org/debian-devel/2005/10/msg00676.html
26. http://lists.debian.org/debian-devel/2005/10/msg00696.html
Dealing with OpenSSL and GPL. Sean Finney [27]reported that he
maintains a package that uses the [28]GNU GPL but links against
[29]OpenSSL and would like to convert it to use [30]GnuTLS. Hendrik
Sattler [31]added a pointer to the [32]compatibility layer that
intends to ease GnuTLS' integration with existing applications.
27. http://lists.debian.org/debian-devel/2005/10/msg00691.html
28. http://www.gnu.org/copyleft/gpl.html
29. http://packages.debian.org/openssl
30. http://packages.debian.org/libgnutls12
31. http://lists.debian.org/debian-devel/2005/10/msg00711.html
32. http://www.gnu.org/software/gnutls/manual/html_node/Compatibility-with-the-OpenSSL-library.html
Security Updates. You know the drill. Please make sure that you update
your systems if you have any of these packages installed.
* DSA 879: [33]gallery -- Privilege escalation.
* DSA 880: [34]phpmyadmin -- Several vulnerabilities.
* DSA 881: [35]openssl096 -- Cryptographic weakness.
* DSA 882: [36]openssl095 -- Cryptographic weakness.
* DSA 883: [37]thttpd -- Insecure temporary file.
* DSA 884: [38]horde3 -- Insecure default installation.
* DSA 885: [39]openvpn -- Several vulnerabilities.
* DSA 886: [40]chmlib -- Several vulnerabilities.
* DSA 887: [41]clamav -- Several vulnerabilities.
* DSA 888: [42]openssl -- Cryptographic weakness.
* DSA 889: [43]enigmail -- Information disclosure.
33. http://www.debian.org/security/2005/dsa-879
34. http://www.debian.org/security/2005/dsa-880
35. http://www.debian.org/security/2005/dsa-881
36. http://www.debian.org/security/2005/dsa-882
37. http://www.debian.org/security/2005/dsa-883
38. http://www.debian.org/security/2005/dsa-884
39. http://www.debian.org/security/2005/dsa-885
40. http://www.debian.org/security/2005/dsa-886
41. http://www.debian.org/security/2005/dsa-887
42. http://www.debian.org/security/2005/dsa-888
43. http://www.debian.org/security/2005/dsa-889
New or Noteworthy Packages. The following packages were added to the
unstable Debian archive [44]recently or contain important updates.
44. http://packages.debian.org/unstable/newpkg_main
* [45]b2evolution -- Multilingual, multiuser, multi-blog engine.
* [46]bse-alsa -- ALSA plugin for BEAST.
* [47]comix -- GTK Comic Book Viewer.
* [48]dares -- Rescue files from damaged CDs and DVDs
(ncurses-interface).
* [49]gddrescue -- GNU data recovery tool Ddrescue.
* [50]geximon -- Monitor for the exim MTA.
* [51]ktorrent -- BitTorrent client for KDE.
* [52]monodevelop-java -- Java plugin for MonoDevelop.
* [53]papercut -- Simple and extensible NNTP server.
* [54]polyglot -- Chess engine protocol adaptor to connect UCI
protocol engines.
* [55]portreserve -- Port reservation program.
* [56]postgresql-8.1 -- Object-relational SQL database, version 8.1
server.
* [57]ssmping -- Checks your multicast connectivity.
* [58]tcpxtract -- Extracts files from network traffic based on file
signatures.
* [59]uruk -- Very small firewall script, for configuring iptables.
* [60]yum -- Advanced front-end for rpm.
45. http://packages.debian.org/unstable/web/b2evolution
46. http://packages.debian.org/unstable/sound/bse-alsa
47. http://packages.debian.org/unstable/x11/comix
48. http://packages.debian.org/unstable/utils/dares
49. http://packages.debian.org/unstable/utils/gddrescue
50. http://packages.debian.org/unstable/mail/geximon
51. http://packages.debian.org/unstable/kde/ktorrent
52. http://packages.debian.org/unstable/devel/monodevelop-java
53. http://packages.debian.org/unstable/news/papercut
54. http://packages.debian.org/unstable/games/polyglot
55. http://packages.debian.org/unstable/admin/portreserve
56. http://packages.debian.org/unstable/misc/postgresql-8.1
57. http://packages.debian.org/unstable/net/ssmping
58. http://packages.debian.org/unstable/net/tcpxtract
59. http://packages.debian.org/unstable/net/uruk
60. http://packages.debian.org/unstable/admin/yum
Want to continue reading DWN? Please help us create this newsletter.
We still need more volunteer writers who watch the Debian community
and report about what is going on. Please see the [61]contributing
page to find out how to help. We're looking forward to receiving your
mail at [62]dwn@debian.org.
61. http://www.debian.org/News/weekly/contributing
62. mailto:dwn@debian.org
Reply to: