Debian Weekly News - July 3rd, 2007
---------------------------------------------------------------------------
Debian Weekly News
http://www.debian.org/News/weekly/2007/06/
Debian Weekly News - July 3rd, 2007
---------------------------------------------------------------------------
Welcome to this year's 6th issue of DWN, the newsletter for the Debian
community. Ulrich Hansen created a set of nice looking CD and DVD
[1]covers for the just released [2]Debian GNU/Linux 4.0. Roland Mas
[3]announced that [4]Alioth has been upgrade to [5]etch. Kurt
Gramlich [6]announced a Skolelinux Youngster Meeting on July 20th to
26th in Chemnitz, Germany.
1. http://www.ulrich-hansen.de/etch/
2. http://www.debian.org/releases/etch/
3. http://lists.debian.org/debian-devel-announce/2007/05/msg00001.html
4. http://alioth.debian.org/
5. http://www.debian.org/releases/etch/
6. http://lists.debian.org/debian-events-eu/2007/06/msg00015.html
Call for Papers for LVEE-2007. Vlad Shakhov [7]called for papers and
speakers for the upcoming [8]Linux Vacation/Eastern Europe (LVEE)
meeting. The event takes place from June, 14th to 17th near Hrodna,
Belarus. The conference goal is to provide open exchange of ideas and
experience between developers and users, give them ability to establish
personal contacts. Participants and speakers are asked to apply not
later than 1st of June.
7. http://lists.debian.org/debian-events-eu/2007/04/msg00012.html
8. http://lvee.org.by/
Interviews with Sam Hocevar. The new Debian project [9]leader was
interviewed by [10]itwire and [11]linux.com. Sam expressed that he
wants to focus on social aspects like improving the internal
communication, teamwork and motivating Ubuntu developers to contribute
to Debian. About the GPLv3 discussion he said that most GPLv2 software
in Debian is already GPLv3 compatible and that using the GPLv3 in
Debian would cause even more license incompatibilities.
9. http://www.debian.org/devel/leader
10. http://www.itwire.com.au/content/view/11654/1090/
11. http://www.linux.com/article.pl?sid=07%2F04%2F26%2F1520212
Collection of Debian Art. André Luiz Rodrigues Ferreira [12]announced
the [13]Debian Art website. It aims to create an archive for high
quality artwork like wallpaper, splash screens, icons, logos,
screenshots or system sounds which can be freely used for KDE, GNOME,
Xfce or t-shirts and labels. This user contributed artwork can be
included in upcoming Debian releases.
12. http://lists.debian.org/debian-devel/2007/05/msg00275.html
13. http://www.debianart.org/
Removing PHP4. Sean Finney [14]announced that PHP4 will be removed from
[15]unstable and thus [16]testing. Sean has setup a Wiki [17]page to
give detailed information for packages depending on PHP4 and to track
the progress. He asked the respective maintainers to fix their packages
to avoid mass bug filing.
14. http://lists.debian.org/debian-devel/2007/05/msg00126.html
15. http://www.debian.org/releases/sid/
16. http://www.debian.org/releases/testing/
17. http://wiki.debian.org/PHP4Removal
Release Team Meeting Results. Andreas Barth [18]summarised the release
team meeting that took place in Jülich, Germany. A review of the
[19]etch release process lead to simplifying the use of release
[20]goals for the upcoming release of [21]lenny. Architecture
qualification status notes are due to be published every two months and
release updates should be sent out more regularly. The report also
contains a rough release schedule which aims at the next release in the
second half of 2008.
18. http://lists.debian.org/debian-devel-announce/2007/06/msg00005.html
19. http://www.debian.org/releases/etch/
20. http://release.debian.org/lenny-goals.txt
21. http://www.debian.org/releases/lenny/
Boosting the Release Team. Luk Claes [22]called for new release
assistants for the lenny release cycle in order to distribute the
workload better among them. Assistants need to have done Quality
Assurance for Debian already, have loads of spare time to use for
release work, have a good understanding of several scripting languages
and acknowledge that they will be doing merely basic work without
authority over the release.
22. http://lists.debian.org/debian-devel-announce/2007/06/msg00007.html
Serious Problem Reminder. Lucas Nussbaum [23]announced that he's going
to send mails to maintainers of packages with serious problems once a
month. When a release-critical bug is open for more than 30 days, or
when the package has not yet migrated into testing the maintainer will
be informed about the problems.
23. http://lists.debian.org/debian-devel/2007/06/msg01063.html
FrOSCon Debian Sub-Conference. Martin Zobel-Helas [24]called for papers
for a Debian sub-conference at this years' [25]FrOSCon that takes place
on August 25th and 26th in St. Augustin, Germany. In addition to the
developer room the project will also [26]run a booth in the exhibition
area.
24. http://lists.debian.org/debian-events-eu/2007/06/msg00019.html
25. http://www.froscon.org/
26. http://lists.debian.org/debian-events-eu/2007/06/msg00006.html
Format String Vulnerabilities in Debian. Karl Chen and David Wagner
will present an [27]analysis on format string vulnerabilities in the
[28]sarge distribution for the ACM SIGPLAN Workshop on [29]Programming
Languages and Analysis for Security that takes place on June 14th in
San Diego, U.S.A. Tools have marked more than 1,500 packages
potentially insecure of which 87 were determined with true format
string bugs.
27. http://www.cs.berkeley.edu/~daw/papers/fmtstr-plas07.pdf
28. http://www.debian.org/releases/sarge/
29. http://www.cs.umd.edu/~mwh/PLAS07/
Backports for Debian Etch. Alexander Wirt [30]announced the
availability of [31]backports for etch. Backported packages should be
available in the testing distribution, contain new and important
features and there has to be user demand for them. Backports for
[32]sarge are still supported and may need to be removed before the
system is upgraded to etch.
30. http://lists.backports.org/lurker-bpo/message/20070419.092600.5007052f.en.html
31. http://www.backports.org/
32. http://www.debian.org/releases/sarge/
Transition to GCC 4.2. Martin Michlmayr [33]called for developers
interested in helping with the transition to GCC 4.2 by uploading
packages and inspecting build failures. Throughout the development of
GCC 4.2, the entire Debian archive has been recompiled regularly with
development snapshots of GCC to ensure a reliable compiler.
33. http://lists.debian.org/debian-devel-announce/2007/06/msg00008.html
Package Build Status. Sergei Golovan [34]wondered about the meaning of
state "uploaded". Goswin von Brederlow [35]explained that it means the
[36]build daemon has received a signed changes file and has uploaded
the package into the incoming queue. When this status does not change
for a while something went wrong. The buildd admin has to upload the
package again or return it for a rebuild.
34. http://lists.debian.org/debian-devel/2007/06/msg01266.html
35. http://lists.debian.org/debian-devel/2007/07/msg00015.html
36. http://www.debian.org/devel/buildd/
Security Updates. You know the drill. Please make sure that you update
your systems if you have any of these packages installed.
* DSA 1280: [37]aircrack-ng -- Arbitrary code execution.
* DSA 1281: [38]clamav -- Several vulnerabilities.
* DSA 1282: [39]PHP4 -- Several vulnerabilities.
* DSA 1283: [40]PHP5 -- Several vulnerabilities.
* DSA 1284: [41]qemu -- Several vulnerabilities.
* DSA 1285: [42]wordpress -- Several vulnerabilities.
* DSA 1286: [43]Linux 2.6.18 -- Several vulnerabilities.
* DSA 1287: [44]ldap-account-manager -- Arbitrary Several
vulnerabilities.
* DSA 1288: [45]pptpd -- Denial of service.
* DSA 1289: [46]Linux 2.6.18 -- Several vulnerabilities.
* DSA 1290: [47]squirrelmail -- Cross-site scripting.
* DSA 1291: [48]samba -- Several vulnerabilities.
* DSA 1292: [49]qt4-x11 -- Cross-site scripting.
* DSA 1293: [50]quagga -- Denial of service.
* DSA 1294: [51]XFree86 -- Several vulnerabilities.
* DSA 1295: [52]PHP5 -- Several vulnerabilities.
* DSA 1296: [53]PHP4 -- Privilege escalation.
* DSA 1297: [54]gforge-plugin-scmcvs -- Arbitrary shell command
execution.
* DSA 1298: [55]otrs2 -- Cross-site scripting.
* DSA 1299: [56]ipsec-tools -- Denial of service.
* DSA 1300: [57]iceape -- Several vulnerabilities.
* DSA 1301: [58]GIMP -- Arbitrary code execution.
* DSA 1302: [59]freetype -- Arbitrary code execution.
* DSA 1303: [60]lighttpd -- Denial of service.
* DSA 1304: [61]Linux 2.6.8 -- Several vulnerabilities.
* DSA 1305: [62]icedove -- Several vulnerabilities.
* DSA 1306: [63]xulrunner -- Several vulnerabilities.
* DSA 1307: [64]OpenOffice.org -- Arbitrary code execution.
* DSA 1308: [65]iceweasel -- Several vulnerabilities.
* DSA 1309: [66]PostgreSQL 8.1 -- Privilege escalation.
* DSA 1310: [67]libexif -- Denial of service.
* DSA 1311: [68]PostgreSQL 7.4 -- Privilege escalation.
* DSA 1312: [69]libapache-mod-jk -- Information disclosure.
* DSA 1313: [70]mplayer -- Arbitrary code execution.
* DSA 1314: [71]open-iscsi -- Several vulnerabilities.
* DSA 1315: [72]libphp-phpmailer -- Arbitrary shell command
execution.
* DSA 1316: [73]emacs21 -- Denial of service.
* DSA 1317: [74]tinymux -- Arbitrary code execution.
* DSA 1318: [75]ekg -- Denial of service.
* DSA 1319: [76]maradns -- Denial of service.
* DSA 1320: [77]clamav -- Several vulnerabilities.
* DSA 1321: [78]evolution-data-server -- Arbitrary code execution.
* DSA 1322: [79]wireshark -- Denial of service.
* DSA 1323: [80]krb5 -- Several vulnerabilities.
* DSA 1324: [81]hiki -- Privilege escalation.
* DSA 1325: [82]evolution -- Arbitrary code execution.
* DSA 1326: [83]fireflier-server -- Insecure temporary files.
* DSA 1327: [84]gsambad -- Insecure temporary files.
* DSA 1328: [85]unicon-imc2 -- Arbitrary code execution.
37. http://www.debian.org/security/2007/dsa-1280
38. http://www.debian.org/security/2007/dsa-1281
39. http://www.debian.org/security/2007/dsa-1282
40. http://www.debian.org/security/2007/dsa-1283
41. http://www.debian.org/security/2007/dsa-1284
42. http://www.debian.org/security/2007/dsa-1285
43. http://www.debian.org/security/2007/dsa-1286
44. http://www.debian.org/security/2007/dsa-1287
45. http://www.debian.org/security/2007/dsa-1288
46. http://www.debian.org/security/2007/dsa-1289
47. http://www.debian.org/security/2007/dsa-1290
48. http://www.debian.org/security/2007/dsa-1291
49. http://www.debian.org/security/2007/dsa-1292
50. http://www.debian.org/security/2007/dsa-1293
51. http://www.debian.org/security/2007/dsa-1294
52. http://www.debian.org/security/2007/dsa-1295
53. http://www.debian.org/security/2007/dsa-1296
54. http://www.debian.org/security/2007/dsa-1297
55. http://www.debian.org/security/2007/dsa-1298
56. http://www.debian.org/security/2007/dsa-1299
57. http://www.debian.org/security/2007/dsa-1300
58. http://www.debian.org/security/2007/dsa-1301
59. http://www.debian.org/security/2007/dsa-1302
60. http://www.debian.org/security/2007/dsa-1303
61. http://www.debian.org/security/2007/dsa-1304
62. http://www.debian.org/security/2007/dsa-1305
63. http://www.debian.org/security/2007/dsa-1306
64. http://www.debian.org/security/2007/dsa-1307
65. http://www.debian.org/security/2007/dsa-1308
66. http://www.debian.org/security/2007/dsa-1309
67. http://www.debian.org/security/2007/dsa-1310
68. http://www.debian.org/security/2007/dsa-1311
69. http://www.debian.org/security/2007/dsa-1312
70. http://www.debian.org/security/2007/dsa-1313
71. http://www.debian.org/security/2007/dsa-1314
72. http://www.debian.org/security/2007/dsa-1315
73. http://www.debian.org/security/2007/dsa-1316
74. http://www.debian.org/security/2007/dsa-1317
75. http://www.debian.org/security/2007/dsa-1318
76. http://www.debian.org/security/2007/dsa-1319
77. http://www.debian.org/security/2007/dsa-1320
78. http://www.debian.org/security/2007/dsa-1321
79. http://www.debian.org/security/2007/dsa-1322
80. http://www.debian.org/security/2007/dsa-1323
81. http://www.debian.org/security/2007/dsa-1324
82. http://www.debian.org/security/2007/dsa-1325
83. http://www.debian.org/security/2007/dsa-1326
84. http://www.debian.org/security/2007/dsa-1327
85. http://www.debian.org/security/2007/dsa-1328
New or Noteworthy Packages. The following packages were added to the
unstable Debian archive [86]recently.
86. http://packages.debian.org/unstable/newpkg_main
* [87]apparix -- Console-based bookmark tool for fast file system
navigation.
* [88]apt-transport-https -- APT HTTPS transport.
* [89]bitstormlite -- BitTorrent Client based on C++/GTK+2.0.
* [90]ctorrent -- BitTorrent Client written in C.
* [91]ecj -- Standalone version of the Eclipse Java compiler.
* [92]ept-cache -- Command line tool to search the package archive.
* [93]fdm -- Fetching, filtering and delivering emails.
* [94]fische -- Standalone sound visualisation for Linux.
* [95]gfa -- GTK+ fast address book.
* [96]giggle -- GTK+ frontend for the git directory tracker.
* [97]gozerbot -- IRC and Jabber bot written in Python.
* [98]gpodder -- GTK+ Media aggregator and Podcast catcher.
* [99]hgsvn -- Scripts to work locally on Subversion checkouts using
Mercurial.
* [100]jlgui -- Graphical music player.
* [101]ksniffer -- Network traffic analyser for KDE.
* [102]mtpaint -- Painting program to create pixel art and manipulate
digital photos.
* [103]mummer -- Efficient sequence alignment of full genomes.
* [104]ophcrack -- Microsoft Windows password cracker using rainbow
tables.
* [105]postpone -- Schedules commands to be executed later.
* [106]powertop -- Linux tool to find out what is using power on a
laptop.
* [107]pybackpack -- User friendly file backup tool for GNOME.
* [108]qgfe -- Qt based Gnuplot Frontend.
* [109]qtemu -- Graphical user interface for QEMU.
* [110]qtiplot -- Data analysis and scientific plotting.
* [111]qtractor -- MIDI/Audio multi-track sequencer application.
* [112]renpy -- Framework for developing visual-novel type games.
* [113]rofs -- Read-Only Filesystem for FUSE.
* [114]slim -- Desktop-independent graphical login manager for X11.
* [115]taxbird -- First free Elster client (German Tax Declarations).
* [116]tripod -- iPod photo uploader.
* [117]tmw -- Mana World is a great Online Rolegame.
* [118]wavbreaker -- Tool to split wave files into multiple chunks.
* [119]xindy -- Index generator for structured documents like LaTeX
or SGML.
87. http://packages.debian.org/unstable/utils/apparix
88. http://packages.debian.org/unstable/admin/apt-transport-https
89. http://packages.debian.org/unstable/net/bitstormlite
90. http://packages.debian.org/unstable/net/ctorrent
91. http://packages.debian.org/unstable/devel/ecj
92. http://packages.debian.org/unstable/misc/ept-cache
93. http://packages.debian.org/unstable/mail/fdm
94. http://packages.debian.org/unstable/sound/fische
95. http://packages.debian.org/unstable/utils/gfa
96. http://packages.debian.org/unstable/devel/giggle
97. http://packages.debian.org/unstable/net/gozerbot
98. http://packages.debian.org/unstable/x11/gpodder
99. http://packages.debian.org/unstable/devel/hgsvn
100. http://packages.debian.org/unstable/sound/jlgui
101. http://packages.debian.org/unstable/kde/ksniffer
102. http://packages.debian.org/unstable/graphics/mtpaint
103. http://packages.debian.org/unstable/science/mummer
104. http://packages.debian.org/unstable/admin/ophcrack
105. http://packages.debian.org/unstable/utils/postpone
106. http://packages.debian.org/unstable/x11/powertop
107. http://packages.debian.org/unstable/gnome/pybackpack
108. http://packages.debian.org/unstable/math/qgfe
109. http://packages.debian.org/unstable/x11/qtemu
110. http://packages.debian.org/unstable/math/qtiplot
111. http://packages.debian.org/unstable/sound/qtractor
112. http://packages.debian.org/unstable/games/renpy
113. http://packages.debian.org/unstable/utils/rofs
114. http://packages.debian.org/unstable/x11/slim
115. http://packages.debian.org/unstable/gnome/taxbird
116. http://packages.debian.org/unstable/graphics/tripod
117. http://packages.debian.org/unstable/games/tmw
118. http://packages.debian.org/unstable/x11/wavbreaker
119. http://packages.debian.org/unstable/text/xindy
Orphaned Packages. 58 packages were orphaned since the last issue and
require a new maintainer. Below is an excerpt of the entire list. This
makes a total of 409 orphaned packages. Many thanks to the previous
maintainers who contributed to the Free Software community. Please see
the [120]WNPP pages for the full list, and please add a note to the bug
report and retitle it to ITA: if you plan to take over a package. To
find out which orphaned packages are installed on your system the
wnpp-alert program from devscripts may be helpful.
120. http://www.debian.org/devel/wnpp/
* [121]airsnort -- WLAN sniffer. ([122]Bug#429507)
* [123]cfourcc -- Command line tool for changing FourCC in Microsoft
RIFF AVI files. ([124]Bug#425242)
* [125]datefudge -- Fake the system date. ([126]Bug#429467)
* [127]divxcomp -- Bitrate calculator for DivX:-) movies written in
perl. ([128]Bug#424713)
* [129]dvi2tty -- Previewing dvi-files on text-only devices.
([130]Bug#430129)
* [131]ecawave -- Graphical audio file editor. ([132]Bug#431141)
* [133]fblogo -- Converts images to framebuffer-logo header file.
([134]Bug#427139)
* [135]flyspray -- Lightweight Bug Tracking System (BTS) in PHP.
([136]Bug#428366)
* [137]gscanbus -- Scan IEEE1394 (firewire/i.link) bus.
([138]Bug#429559)
* [139]kforth -- Small Forth Interpreter Written in C++.
([140]Bug#429469)
* [141]labrea -- "Sticky" honeypot and IDS. ([142]Bug#424715)
* [143]libc-scan-perl -- Scan C language files for easily recognised
constructs. ([144]Bug#430977)
* [145]medussa -- Distributed password cracking system.
([146]Bug#424716)
* [147]metacam -- Extract EXIF information from digital camera files.
([148]Bug#425241)
* [149]outguess -- Universal Steganographic tool. ([150]Bug#424718)
* [151]pmidi -- Command line MIDI player for ALSA. ([152]Bug#429755)
* [153]procmail-lib -- Library of useful procmail recipes.
([154]Bug#430981)
* [155]stegdetect -- Detect and extract steganography messages inside
JPEG. ([156]Bug#424720)
* [157]tcpick -- TCP stream sniffer and connection tracker.
([158]Bug#430030)
* [159]wmcalc -- Dockable calculator application. ([160]Bug#427132)
121. http://packages.debian.org/unstable/net/airsnort
122. http://bugs.debian.org/429507
123. http://packages.debian.org/unstable/graphics/cfourcc
124. http://bugs.debian.org/425242
125. http://packages.debian.org/unstable/devel/datefudge
126. http://bugs.debian.org/429467
127. http://packages.debian.org/unstable/utils/divxcomp
128. http://bugs.debian.org/424713
129. http://packages.debian.org/unstable/tex/dvi2tty
130. http://bugs.debian.org/430129
131. http://packages.debian.org/unstable/sound/ecawave
132. http://bugs.debian.org/431141
133. http://packages.debian.org/unstable/devel/fblogo
134. http://bugs.debian.org/427139
135. http://packages.debian.org/unstable/web/flyspray
136. http://bugs.debian.org/428366
137. http://packages.debian.org/unstable/utils/gscanbus
138. http://bugs.debian.org/429559
139. http://packages.debian.org/unstable/interpreters/kforth
140. http://bugs.debian.org/429469
141. http://packages.debian.org/unstable/net/labrea
142. http://bugs.debian.org/424715
143. http://packages.debian.org/unstable/perl/libc-scan-perl
144. http://bugs.debian.org/430977
145. http://packages.debian.org/unstable/admin/medussa
146. http://bugs.debian.org/424716
147. http://packages.debian.org/unstable/graphics/metacam
148. http://bugs.debian.org/425241
149. http://packages.debian.org/unstable/utils/outguess
150. http://bugs.debian.org/424718
151. http://packages.debian.org/unstable/sound/pmidi
152. http://bugs.debian.org/429755
153. http://packages.debian.org/unstable/mail/procmail-lib
154. http://bugs.debian.org/430981
155. http://packages.debian.org/unstable/utils/stegdetect
156. http://bugs.debian.org/424720
157. http://packages.debian.org/unstable/net/tcpick
158. http://bugs.debian.org/430030
159. http://packages.debian.org/unstable/x11/wmcalc
160. http://bugs.debian.org/427132
Want to continue reading DWN? Please help us create this newsletter. We
still need more volunteer writers who watch the Debian community and
report about what is going on. Please see the [161]contributing page to
find out how to help. We're looking forward to receiving your mail at
[162]dwn@debian.org.
161. http://www.debian.org/News/weekly/contributing
162. mailto:dwn@debian.org
This issue of Debian Weekly News was edited by Sebastian Feltel,
Thomas Bliesener, Y Giridhar Appaji Nag and Martin 'Joey' Schulze.
Reply to: