Date: Wed, 28 Jun 2000 16:28:07 -0700
From: Joey Hess joeyh@debian.org
To: debian-news@lists.debian.org
Subject: Debian Weekly News – June 27th, 2000
Debian Weekly News http://www.debian.org/News/weekly/current/issue/ Debian Weekly News - June 27th, 2000
Welcome to Debian Weekly News, a newsletter for the Debian
developer community.
Test Cycle 2 [8]is over and the archive is being [9]updated in
preparation for the next test cycle. The release manager and others
have been aggressively downgrading and fixing RC bugs, as well as
removing some packages, the result is [10]less than 40 RC bugs
remain open, a record low. Of course, the big question is: Will the
third Test Cycle be the last? Only time will tell, but confidence
is [11]on the rise.
Upgrading from 1.3 to frozen. Many [12]install and upgrade
reports have been posted in the past couple of weeks, but [13]this
one stands out. It’s an upgrade from a system running Debian 1.3
all the way to frozen in one step, and it worked fine except one
small and documented glitch. “Thanks and big kudos to all Debian:
it is quite uncommon that an operating system may upgrade like this
(consider also that it passed from a libc5 to a libc6 arch… and
it took just 45 minutes)”
This week's security fixes:
* An [14]updated X was installed into frozen, fixing a denial of
service attack, a symlink attack, and 4 security holes in Xlib.
* A remote root exploit in wu-ftpd has been [15]fixed. Note that
"the default configuration in all current Debian packages prevents
the currently available exploits in the case of anonymous access,
although local users could still possibly compromise the server."
* A remote root exploit in dhcp-client-beta and dhcp-client has also
been [16]fixed.
More Debian-based distributions. [17]AMIRIX Linux is a Debian-based
distribution aimed at the embedded Linux space. AMIRIX is the
principal sponsor of the [18]Embedded Debian Project, which aims to
“make Debian GNU/Linux a natural choice for embedded Linux.” “This
is an independent project, and is not formally associated with
Debian. We plan on working closely with Debian, with the goal of
our work eventually being integrated into the mainstream. ” The
project was announced to the debian-devel mailing list back in May,
but Debian Weekly News missed [19]the announcement, which gives
some background information.
Freshmeat will be hosting an unofficial .deb archive, called the
Deb Freshmeat Repository. The plans for this archive are to provide
a central location for unofficial packages. “With the recent hubbub
over KDE/QPL, the talk of removal of non-free, multiple .deb using
distributions and the multitude of unofficial aptable and
non-aptable sites with .debs the time is ripe.” Seth Cohn has
provided a [20]summary of the discussions on the debian-freshmeat
list.
References
8.
http://www.debian.org/Lists-Archives/debian-release-0006/msg00048.html
9.
http://www.debian.org/Lists-Archives/debian-devel-announce-0006/msg00012.html
10. http://bugs.debian.org/~wakkerma/bugs/
11.
http://www.debian.org/Lists-Archives/debian-devel-0006/msg01941.html
12.
http://www.debian.org/Lists-Archives/debian-testing-0006/threads.html
13.
http://www.debian.org/Lists-Archives/debian-devel-0006/msg01830.html
14.
http://www.debian.org/Lists-Archives/debian-devel-changes-0006/msg01023.html
15. http://www.debian.org/security/2000/20000619
16. http://www.debian.org/News/weekly/current/issue/mail#2
17. http://www.amirixlinux.com/
18. http://www.emdebian.org/
19.
http://www.debian.org/Lists-Archives/debian-devel-0005/msg00294.html
20. http://www.debian.org/News/weekly/current/issue/mail#1
—
see shy jo