Date: Wed, 19 Jul 2000 19:44:25 -0700
From: Joey Hess joeyh@debian.org
To: debian-news@lists.debian.org
Subject: Debian Weekly News – July 19th, 2000
Debian Weekly News
http://www.debian.org/News/weekly/current/issue/
Debian Weekly News - July 19th, 2000
Welcome to Debian Weekly News, a newsletter for the Debian community.
A quick release status update: The release managers are [1]back, and
fixed packages are moving into frozen again. We have still not entered
the third test cycle. [2]Here is a short list of things that are
holding it up.
Security fixes. A [3]remote root exploit in the rpc.statd program
from nfs-common was found and fixed this week. This effects potato and
woody only, not stable, and an immediate upgrade is recommended. A fix
was also released for a remote shell exploit [4]in cvsweb.
The debian-policy list, which has been mostly inactive for a while, is
waking back up. A [5]new release of the policy manual might happen
sometime soon. The [6]current hot topic is adding new fields to
Debian packages, to allow use of third party bug tracking systems, and
mark the origin of a package. Few would dispute that such things are
increasingly needed as third party Debian packages proliferate, but
exactly how they should be implemented is a matter of some debate.
Last week this newsletter ran a brief notice about a proposal to
remove libc5 support packages from unstable. The discussion was only
beginning then; now people have had a week to object to the idea. Most
objections however, do not take into account the fact that removing
libc5 support from unstable will not remove existing libc5 packages
from their machines, and libc5 support packages will [7]still be
available from the [8]debian archives. There were some valid worries
though. What if we drop libc5 support and then changes to the linker
make the old and unsupported libc5 packages [9]stop working? To
address this, we might keep libc5 itself in unstable, but remove all
the other libc5 compatibility libraries and development support -- a
[10]compromise that seems to satisfy everyone.
The libc5 discussion then expanded into a more [11]general discussion
about whether we should "limit upgradability to two major releases
back". Recently there have been successful upgrades from Debian 1.3 to
frozen, skipping two major releases. This is a fine accomplishment,
but making it work does take a lot of effort, and require a
significant amount of cruft in the distribution. Would our time be
better spent on improving other things? No resolution on this one yet.
New packages in Debian unstable this week include the following:
* [12]dvipdfm: DVI to PDF translator
* gnocatan: an emulation of the Settlers of Catan board game which
can be played over the internet. ([13]client, [14]data, [15]help,
[16]server)
* [17]grdb: sets your Xresources from your gtk theme
* [18]transformiix: a fast standalone XSLT processor
References
1. http://www.debian.org/Lists-Archives/debian-release-0007/msg00008.html
2. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00913.html
3. http://www.debian.org/Lists-Archives/debian-security-announce-00/msg00019.html
4. http://www.debian.org/Lists-Archives/debian-security-announce-00/msg00018.html
5. http://www.debian.org/Lists-Archives/debian-policy-0007/msg00050.html
6. http://www.debian.org/Lists-Archives/debian-policy-0007/msg00074.html
7. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00527.html
8. ftp://archive.debian.org/debian-archive/dists/
9. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00565.html
10. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00531.html
11. http://www.debian.org/Lists-Archives/debian-devel-0007/msg00548.html
12. http://www.debian.org/Packages/unstable/tex/dvipdfm.html
13. http://www.debian.org/Packages/unstable/games/gnocatan-client.html
14. http://www.debian.org/Packages/unstable/games/gnocatan-data.html
15. http://www.debian.org/Packages/unstable/games/gnocatan-help.html
16. http://www.debian.org/Packages/unstable/games/gnocatan-server.html
17. http://www.debian.org/Packages/unstable/x11/grdb.html
18. http://www.debian.org/Packages/unstable/text/transformiix.html
--
see shy jo
--
To UNSUBSCRIBE, email to debian-news-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org