Debian Weekly News - August 17th, 2004

Posted by dave on Aug 18, 2004 4:00 AM EDT
Mailing list; By Martin Schulze <>
Mail this story
Print this story

Of interest to large-scale installations: Hewlett-Packard finally offers 24x7 support for Debian GNU/Linux with HP Extensions. In an article Chris DiBona highlighted the services offered by GNU/Linux vendors and pointed out that their repositories are miles ahead of competing proprietary commercial offerings.

Debian Weekly News
Debian Weekly News - August 17th, 2004

Welcome to this year's 32nd issue of DWN, the weekly newsletter for the Debian community. Of interest to large-scale installations: Hewlett-Packard finally [1]offers 24x7 support for [2]Debian GNU/Linux with HP Extensions. In an [3]article Chris DiBona highlighted the services offered by GNU/Linux vendors and pointed out that their repositories are miles ahead of competing proprietary commercial offerings.

1. 2. 3.

Investigating Sarge Security. Joey Hess [4]looked through every [5]security advisory issued in 2004 and checked to see if the security hole was fixed in sarge as well. Security holes not fixed yet in sarge include those in [6]libpng, [7]libpng3, [8]php4, [9]netkit-telnet-ssl, [10]pavuk, [11]www-sql, [12]lha, [13]log2mail, [14]hsftp, [15]trr19, and [16]slocate. The other 1.5 years worth of security advisories back to the release of woody would probably take several more days to check. [17]Investigation of security advisories from 2003 revealed that security updates for [18]tomcat4 and [19]gtksee are missing in sarge.

4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19.

Debian-Installer Review. Bruce Bayfield [20]reviewed the new [21]debian-installer (d-i). He says "It introduces Debian's strengths right at the start, and it goes a long way toward burying Debian's reputation for being difficult to install." He added, that, by installing only a minimal number of packages, d-i defaults to a noticeably more secure system compared to most commercial distributions. Bayfield suggests the new installer ease of use will bring many new users to Debian.

20. 21.

What comes after Sarge? Osamu Aoki [22]wanted to release a new [23]debian-reference package that explains the latest release names. Naturally he was wondering which name testing will become once sarge is released as Debian 3.1. Colin Watson opened the curtain and [24]revealed that the release after sarge will be called etch. Quickly, a discussion arose about using a different name and voting upon the name.

22. 23. 24.

Zero-Day Non-maintainer Uploads. Steve Langesek [25]said that this close to the release of sarge, 3 days can definitely make the difference between a package being ready in time for sarge, and not being ready in time. Moreover, history shows us that 0-day non-maintainer uploads (NMUs) have been very effective at bringing the release-critical (RC) bug count down rapidly. He would therefore like to declare open-season on RC bugs, including 0-day NMUs if appropriate until the release of sarge.


Online Changelog Files. Andrew Pollock was [26]missing a possibility to reach changelog files without actually installing the corresponding packages. Therefore he has created [27] which contained those files. Martin Michlmayr [28]revealed that changelog files already exist on [29] Hence, the new site finally redirects HTTP requests to the files on

26. 27. 28. 29.

Best Practice QA Uploads. Matthew Palmer [30]started to write a QA upload best practices document after working through quality assurance (QA) procedures with one of his new-maintainer applicants. The [31]second version caused some [32]disagreement on the scope of a QA upload, though.

30. 31. 32.

Synchronising Skolelinux with Sarge. Petter Reinholdtsen posted a [33]list of packages that the [34]Skolelinux people should push into Debian in order to get Debian synchronised with Skolelinux. He and Joey Hess are [35]worried that it may already be too late to get new packages into Debian in time for the release of sarge.

33. 34. 35.

Which KDE Version in Sarge? Co-release-manager Steve Langasek [36]complained about a last minute upload of a number of packages from KDE 3.3 to unstable. Since he considers it undesirable to have a mix of different versions and impossible to get all of KDE 3.3 into sarge on schedule for the release, he concluded that KDE in sarge will not be updated from unstable and fixes to KDE related packages should be submitted to testing-proposed-updates. Chris Cheney [37]objected to Steve's assessment, while [38]Ben Burton and [39]René Engelhard concurred. René also [40]noticed that [41]kdelibs-data again caused file conflicts with [42]

36. 37. 38. 39. 40. 41. 42.

Cdrecord on the Way to non-free. Jose Carlos Garcia Sogo [43]noticed that Jörg Schilling has added a non-modification clause to a file within the [44]cdrecord distribution which renders the package non-free since this is in direct [45]conflict with the [46]GNU General Public License.

43. 44. 45. 46.

New LaTeX Project Public License, Version 1.3. Branden Robinson [47]reported that a new version of the [48]LaTeX Project Public License (LPPL) has been published, taking most of debian-legal contributor's comments into account, and the LaTeX project also intends to see OSI Certification. It seems to be compliant with the [49]Debian Free Software Guidelines. Hilmar Preusse [50]added that the teTeX packages in Debian are released under LPPL 1.2.

47. 48. 49. 50.

Freeness of the Qt Public License. Martin Krafft [51]wondered if the new [52]Qt Public License (QPL) is considered DFSG-free, since it is [53]OSI approved and because it was [54]requested to remove [55]libcwd from main. Andrew Suffield [56]asserted that choice-of-venue clauses are decidedly non-free.

51. 52. 53. 54. 55. 56.

Bug Squashing Week. Frank Lichtenheld [57]announced that this entire week has been declared the bug squashing week. He will be around in #debian-bugs on both and over the whole period of time (except for system recreation intervals) trying to keep the party going and appeal to all people to participate on it. He will be also joining the real life bug squashing party at the TU Darmstadt, Germany.


New SPI Officers. John Goerzen [58]announced that [59]Software in the Public Interest, Inc. (SPI) has [60]selected the [61]officers during its annual meeting. They are: President: John Goerzen, Vice President: Benjamin Mako Hill, Treasurer: Jimmy Kaplowitz, and Secretary: David Graham. He also announced the [62]annual report for SPI and encouraged Debian developers to get involved with this organisation.

58. 59. 60. 61. 62.

Security Updates. You know the drill. Please make sure that you update your systems if you have any of these packages installed.

* [63]ruby -- Insecure CGI session management. * [64]rsync -- Unauthorised directory traversal and file access. * [65]kdelibs -- Denial of service.

63. 64. 65.

New or Noteworthy Packages. The following packages were added to the unstable Debian archive [66]recently or contain important updates.


* [67]akode -- Akode arts plugin. * [68]amd64-libs -- AMD64 shared libraries for use on i386/x86_64 systems. * [69]bindgraph -- DNS statistics RRDtool frontend for BIND9. * [70]ccs -- Cluster configuration system. * [71]cman -- Cluster manager. * [72]coqide -- Proof assistant for higher-order logic. * [73]couriergraph -- Mail statistics RRDtool frontend for Courier-{POP,IMAP}. * [74]digitemp -- Program to read from temperature sensors in a 1-wire net. * [75]eagle-usb-utils -- Userspace tools for Eagle USB ADSL modems. * [76]fence -- I/O fencing system. * [77]freedoom -- Free game files for the 3D game DOOM. * [78]gcjwebplugin -- Web browser plugin to execute Java (tm) applets. * [79]gfs-tools -- Global File System. * [80]ghdl -- VHDL compiler/simulator using GCC technology. * [81]gimp-gap -- GIMP Animation Package. * [82]gnurobbo -- GNU Robbo is logic game ported from ATARI XE/XL. * [83]gnustep -- GNUstep Development Environment -- user applications. * [84]gradm2 -- Administration program for the grsecurity2 RBAC based ACL system. * [85]gtweakui -- Collection of simple dialogs as a front end to GConf. * [86]ibwebadmin -- Web-based administration for the Firebird and Interbase database. * [87]ifstat -- InterFace STATistics Monitoring. * [88]kaquarium -- Aquarium panel applet for KDE. * [89]kfish -- Fish panel applet for KDE. * [90]kolourpaint -- Simple Paint Program for KDE. * [91]ksociograma -- Technical educational software to make sociograms. * [92]kwartz -- Language independent HTML templating system. * [93]laptop-mode-tools -- Userland scripts to control "laptop mode". * [94]mcpp -- Matsui's CPP implementation precisely conformed to standards. * [95]mpc -- Command-line tool to interface MPD. * [96]mpd -- Music Player Daemon, the name says it all. * [97]normalize-audio -- Adjust the volume of WAV files to a standard volume level. * [98]ntfsprogs -- Tools for doing neat things in NTFS partitions from Linux. * [99]pentanet-utils -- Utilities for Pent@NET DVB Data receiving cards. * [100]php-mail-mime -- PHP PEAR module for creating and decoding MIME messages. * [101]php-radius -- Radius protocol implementation in PHP. * [102]pymacs -- Interface between Emacs Lisp and Python [dummy package]. * [103]pymacs-elisp -- Emacsen Lisp modules for pymacs. * [104]qsynaptics -- Qt application to configure Synaptic TouchPad. * [105]request-tracker3.2 -- Extensible trouble-ticket tracking system. * [106]shermans-aquarium -- Sherman's aquarium applet for GNOME 2. * [107]spfqtool -- Command-line SPF query tool. * [108]torsmo -- System monitor that sits in the corner of your desktop. * [109]zope-cookiecrumbler -- Use cookies even when folder doesn't support cookies.

67. 68. 69. 70. 71. 72. 73. 74. 75. 76. 77. 78. 79. 80. 81. 82. 83. 84. 85. 86. 87. 88. 89. 90. 91. 92. 93. 94. 95. 96. 97. 98. 99. 100. 101. 102. 103. 104. 105. 106. 107. 108. 109.

Debian Packages introduced last Week. Every day, a different Debian package is [110]featured from the testing distribution. If you know about an obscure package you think others should also know about, send it to [111]Andrew Sweger. Debian package a day introduced the following packages last week.

110. 111.

* [112]mairix -- Indexes and searches email in Maildir and MH formats. * [113]pydf -- Colourised df(1)-clone. * [114]ixbiff -- Notify user when mail arrives by blinking keyboard LEDs.

112. 113. 114.

Orphaned Packages. 5 packages were orphaned this week and require a new maintainer. This makes a total of 168 orphaned packages. Many thanks to the previous maintainers who contributed to the Free Software community. Please see the [115]WNPP pages for the full list, and please add a note to the bug report and retitle it to ITA: if you plan to take over a package.


* [116]debconf -- Debian configuration management system. ([117]Bug#265570) * [118]libapache-dbilogger-perl -- Tracks what's being transferred in a DBI database. ([119]Bug#265760) * [120]lzo -- Real-time data compression library. ([121]Bug#265726) * [122]lzop -- Real-time compressor. ([123]Bug#265727) * [124]python-bsddb3 -- Python interface to libdb3. ([125]Bug#264695)

116. 117. 118. 119. 120. 121. 122. 123. 124. 125.

Want to continue reading DWN? Please help us create this newsletter. We still need more volunteer writers who watch the Debian community and report about what is going on. Please see the [126]contributing page to find out how to help. We're looking forward to receiving your mail at [127]

126. 127.

-- To UNSUBSCRIBE, email to [] with a subject of "unsubscribe". Trouble? Contact []


» Read more about: Story Type: Newsletter; Groups: Debian

« Return to the newswire homepage

This topic does not have any threads posted yet!

You cannot post until you login.