Debian Weekly News - September 14th, 1999
Welcome to Debian Weekly News, a newsletter for the Debian developer community.
In security news, a buffer overflow in the inews program provided by the INN news server has been reported which would allow local users privileges as gid 'news'. New versions of inewsinn, inn-dev and inn have been made available at security.debian.org.
The Bug Tracking System has been upgraded to use the debbugs package, and Darren Benham is the new maintainer of the BTS. This is very good news, because development has been going on in debbugs for some time, and now the BTS will benefit from this and from future enhancements. The BTS was down for a while this weekend for the transition; no mail was lost.
An interview with Matt Welsh contains some interesting Debian-related tidbits. "I was a member of the original Debian team. I invented dpkg, or the first version of it, which looked nothing like what it looks like now" and "They [Debian] are great idealists, but pragmatism sometimes has to step in."
Raphaël Hertzog posted a proposed structure for the QA group. This includes a core QA team and a web site to coordinate their work. The plan is to greatly expand what the QA group works on, to include many things besides maintaining orphaned packages.
A few packages broke this week in unstable. A new version of tar made lintian very confused; this has been fixed. And a new netstd package split rsh into a separate package. That package is still in Incoming, and until it reaches the archives, rsh isn't available. Other things happening in unstable this week include:
- The shadow suite now uses PAM. This includes login, passwd, su, etc. This is a huge step toward making everything use PAM.
- The long awaited redesign of the installation profiles has begun. Now there are "metapackages"; packages that depend on a group of packages that relate to a common activity, like playing games or developing C programs. Martin Bialasinski posted a request for help coming up with lists of packages for each metapackage.
Should Debian move to GRUB as our default boot loader? After all, since GRUB is used by the Hurd, this would standardize the boot system used for Debian Linux and Debian Hurd. Here is a good summary of pros and cons of using GRUB. Another con is that H. Peter Anvin is working on a new boot loader for linux that promises to be superior to both. No conclusion has been reached on this, but no-one seems especially attached to lilo.
And speaking of the Hurd, it's been a big week for the Hurd port, with 44 updated packages, along with a new set of installation files.
Work on Debian JP continues and as usual a summary is available, covering topics from internationalization to a translated DFSG document, and work on a Social Contract for Debian JP.
Followups to last week's news:
- The item about the problems in BIND's copyright was picked up by Linux Weekly News and later by SlashDot. The maintainer of BIND began talking with upstream about ways to resolve the problem, and it looks like a solution has been found -- a "bind-norsa" tarball will be available.
- Developers who want to migrate to GPG can read a mini-HOWTO on the subject by Brian Almeida.
Thanks to Simon Hologate, Katsura S. Yoshio, and Randolph Chung for contributing.
To receive this newsletter weekly in your mailbox, subscribe to the debian-news mailing list.
Back issues of this newsletter are available.
This issue of Debian Weekly News was edited by Joey Hess.