1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
|
#use wml::debian::weeklynews::header PUBDATE="2005-07-12" SUMMARY="LSB, GCC, Consultants, Ada, Transition, Dependencies, Archive, Documentation"
# $Id$
<p>Welcome to this year's 28th issue of DWN, the weekly newsletter for the
Debian community. Bill Allombert <a
href="http://lists.debian.org/debian-devel/2005/06/msg02112.html">called</a>
for arm porters to support the <a href="$(HOME)/ports/arm/">ARM port</a> of
Debian. As this year's <a href="$(HOME)/events/2005/0710-debconf">Debian
conference</a> is taking place now, <a href="http://planet.debian.org/">\
Debian Planet</a> carries a lot of content from the attending developers.</p>
<p><strong>LSB Version to support?</strong> Andreas Barth <a
href="http://lists.debian.org/debian-release/2005/06/msg00309.html">wondered</a>
which version of the Linux Standard Base (LSB) standard the upcoming etch
release should support. Matt Taggart would like to <a
href="http://lists.debian.org/debian-release/2005/06/msg00310.html">support</a>
LSB 3.0 which requires a newer glibc and may also need some tweaks to X.Org,
but both are needed anyway. To get the work done, Dave Neil started a <a
href="http://lists.debian.org/debian-lsb/2005/06/msg00020.html">discussion</a>
on who is working on which part.</p>
<p><strong>GCC 4.0 and C++ ABI Change.</strong> Matthias Klose <a
href="http://lists.debian.org/debian-devel-announce/2005/07/msg00001.html">\
announced</a> the start of the GCC and C++ transition. GCC 4.0 is now the
default compiler in unstable, developers are required to upgrade their build
environment accordingly. Developers are advised not to upload any C++ code,
that build-depends on a library written in C++ which is not yet converted to
the new C++ ABI (Application binary interface).</p>
<p><strong>Debian Consultants List Update.</strong> Thomas Huriaux <a
href="http://lists.debian.org/debian-project/2005/07/msg00038.html">pointed
out</a> that several Debian <a href="$(HOME)/consultants/">\
consultants</a> have not yet answered a "ping" message via mail, even though
they are required to respond within four weeks according to the new Debian
consultants <a href="$(HOME)/consultants/#policy">policy</a>. They will be
removed from the list if they don't answer.</p>
<p><strong>State of Ada in Debian.</strong> Ludovic Brenta <a
href="http://lists.debian.org/debian-devel/2005/06/msg01586.html">reported</a>
about his 18 month of maintainership of many Ada and related packages in
Debian and that he's looking for a new sponsor. He has also written a draft
<a href="http://www.ada-france.org/debian/debian-ada-policy.html">policy</a>
for Ada packages which should ensure that all Ada packages use the same ABI
(binary interface), and work well together, especially libraries.</p>
<p><strong>Dummy Transition Packages and the Replaces Field.</strong>
Margarita Manterola <a
href="http://lists.debian.org/debian-devel/2005/06/msg02045.html">\
wondered</a> what to do to avoid dummy packages. These help upgrading
packages to a different package. The <a
href="http://lists.debian.org/debian-devel/2005/06/msg02052.html">\
alternative</a> means <a
href="$(HOME)/doc/debian-policy/ch-relationships.html#s7.5.2">using</a>
<code>Replaces</code> and <code>Conflicts</code> settings. Simon Richter <a
href="http://lists.debian.org/debian-devel/2005/06/msg02085.html">explained</a>
how this mechanism is supposed to work on a <code>dist-upgrade</code>.</p>
<p><strong>Circular Dependencies.</strong> Bill Allombert <a
href="http://lists.debian.org/debian-devel/2005/06/msg02111.html">wanted</a>
to remove circular dependencies as they cause <a
href="https://bugs.debian.org/310490">problems</a> during an upgrade. Robert
Lemmen created a <a href="http://debian.semistable.com/debgraph.out">\
summary</a> of current circular dependencies. Colin Watson <a
href="http://lists.debian.org/debian-devel/2005/07/msg00062.html">added</a>
that <a href="http://packages.debian.org/dpkg">dpkg</a> will break loops and
that pre-depends mitigate the problems.</p>
<p><strong>Removing old orphaned Packages?</strong> Frank Lichtenheld <a
href="http://lists.debian.org/debian-qa/2005/06/msg00040.html">prepared</a> a
<a href="http://lists.debian.org/debian-qa/2005/06/msg00041.html">list</a> of
packages that have been orphaned more than one year ago with nobody taking
over maintainership. Many of these packages aren't used at all. Martin
Michlmayr <a href="http://lists.debian.org/debian-qa/2005/06/msg00052.html">\
added</a> more orphaned packages to the list. They are all planned to be <a
href="http://lists.debian.org/debian-qa/2005/06/msg00042.html">removed</a>
from the distribution soon.</p>
<p><strong>Removing non-free Documentation.</strong> Frank Lichtenheld <a
href="http://lists.debian.org/debian-devel/2005/06/msg02150.html">planned</a>
to organise the removal of <a
href="http://packages.debian.net/non-free-docs.html">non-free
documentation</a> from Debian. There is not yet a timeline for when he will
file bug reports, though. He also proposed to use a special subject line in
which the used license is decoded for easier recognition of such bugs.</p>
<p><strong>Security Updates.</strong> You know the drill. Please make sure
that you update your systems if you have any of these packages installed.</p>
<ul>
<li>DSA 737: <a href="$(HOME)/security/2005/dsa-737">clamav</a> --
Remote denial of service.
<li>DSA 738: <a href="$(HOME)/security/2005/dsa-738">razor</a> --
Remote denial of service.
<li>DSA 739: <a href="$(HOME)/security/2005/dsa-739">trac</a> --
Upload/download vulnerability.
<li>DSA 740: <a href="$(HOME)/security/2005/dsa-740">zlib</a> --
Denial of service.
<li>DSA 741: <a href="$(HOME)/security/2005/dsa-741">bzip2</a> --
Decompression bomb.
<li>DSA 742: <a href="$(HOME)/security/2005/dsa-742">cvs</a> --
Arbitrary code execution.
<li>DSA 743: <a href="$(HOME)/security/2005/dsa-743">ht</a> --
Arbitrary code execution.
<li>DSA 744: <a href="$(HOME)/security/2005/dsa-744">fuse</a> --
Information disclosure.
<li>DSA 745: <a href="$(HOME)/security/2005/dsa-745">drupal</a> --
Multiple vulnerabilities.
<li>DSA 747: <a href="$(HOME)/security/2005/dsa-747">egroupware</a> --
Remote command execution.
<li>DSA 748: <a href="$(HOME)/security/2005/dsa-748">ruby1.8</a> --
Arbitrary command execution.
<li>DSA 749: <a href="$(HOME)/security/2005/dsa-749">ettercap</a> --
Arbitrary command execution.
<li>DSA 750: <a href="$(HOME)/security/2005/dsa-750">dhcpcd</a> --
Denial of service.
<li>DSA 751: <a href="$(HOME)/security/2005/dsa-751">squid</a> --
IP spoofing vulnerability.
<li>DSA 752: <a href="$(HOME)/security/2005/dsa-752">gzip</a> --
Several vulnerabilities.
<li>DSA 753: <a href="$(HOME)/security/2005/dsa-753">gedit</a> --
Denial of service.
</ul>
<p><strong>New or Noteworthy Packages.</strong> The following packages were
added to the unstable Debian archive <a
href="http://packages.debian.org/unstable/newpkg_main">recently</a> or contain
important updates.</p>
<ul>
<li><a href="http://packages.debian.org/unstable/devel/gfortran">gfortran</a>
-- GNU Fortran 95 compiler.
<li><a href="http://packages.debian.org/unstable/mail/imapcopy">imapcopy</a>
-- IMAP backup, copy and migration tool.
<li><a href="http://packages.debian.org/unstable/sound/jackbeat">jackbeat</a>
-- Drum-machine-like audio sequencer with JACK support.
<li><a href="http://packages.debian.org/unstable/shells/mksh">mksh</a>
-- Enhanced version of the Korn shell.
<li><a href="http://packages.debian.org/unstable/interpreters/scheme48">scheme48</a>
-- Simple, modular, and lightweight Scheme implementation.
<li><a href="http://packages.debian.org/unstable/games/sgt-puzzles">sgt-puzzles</a>
-- Simon Tatham's Portable Puzzle Collection - 1-player puzzle games.
<li><a href="http://packages.debian.org/unstable/libs/tdsodbc">tdsodbc</a>
-- ODBC driver for connecting to MS SQL and Sybase SQL servers.
<li><a href="http://packages.debian.org/unstable/utils/tthsum">tthsum</a>
-- Generates or checks TTH message digests.
<li><a href="http://packages.debian.org/unstable/utils/yaird">yaird</a>
-- Yet Another mkInitRD.
<li><a href="http://packages.debian.org/unstable/net/ysm">ysm</a>
-- Powerful ICQ console client.
</ul>
<p><strong>Orphaned Packages.</strong> 7 packages were orphaned this week and
require a new maintainer. This makes a total of 222 orphaned packages. Many
thanks to the previous maintainers who contributed to the Free Software
community. Please see the <a href="$(HOME)/devel/wnpp/">WNPP pages</a> for
the full list, and please add a note to the bug report and retitle it to ITA:
if you plan to take over a package.</p>
<ul>
<li> <a href="http://packages.debian.org/unstable/perl/libapache-template-perl">libapache-template-perl</a>
-- Apache/mod_perl interface to the Template Toolkit.
(<a href="https://bugs.debian.org/317274">Bug#317274</a>)
</li>
<li> <a href="http://packages.debian.org/unstable/perl/libclass-prototyped-perl">libclass-prototyped-perl</a>
-- Fast prototype-based OO programming in Perl.
(<a href="https://bugs.debian.org/317272">Bug#317272</a>)
</li>
<li> <a href="http://packages.debian.org/unstable/perl/libcrypt-unixcrypt-perl">libcrypt-unixcrypt-perl</a>
-- Perl-only implementation of the crypt(3) function.
(<a href="https://bugs.debian.org/316936">Bug#316936</a>)
</li>
<li> <a href="http://packages.debian.org/unstable/perl/libio-stty-perl">libio-stty-perl</a>
-- Interface to secure pseudo ttys.
(<a href="https://bugs.debian.org/317273">Bug#317273</a>)
</li>
<li> <a href="http://packages.debian.org/unstable/misc/mysql-navigator">mysql-navigator</a>
-- GUI client program for MySQL database server.
(<a href="https://bugs.debian.org/316938">Bug#316938</a>)
</li>
<li> <a href="http://packages.debian.org/unstable/utils/pornview">pornview</a>
-- Image and movie viewer/manager.
(<a href="https://bugs.debian.org/316934">Bug#316934</a>)
</li>
<li> <a href="http://packages.debian.org/unstable/net/secpanel">secpanel</a>
-- Graphical user interface for SSH and SCP.
(<a href="https://bugs.debian.org/317063">Bug#317063</a>)
</li>
</ul>
<p><strong>Want to continue reading DWN?</strong> Please help us create this
newsletter. We still need more volunteer writers who watch the Debian
community and report about what is going on. Please see the <a
href="$(HOME)/News/weekly/contributing">contributing page</a> to find out how
to help. We're looking forward to receiving your mail at <a
href="mailto:dwn@debian.org">dwn@debian.org</a>.</p>
#use wml::debian::weeklynews::footer editor="Filippo Giunchedi, Martin 'Joey' Schulze"
|
