Slashdot Mirror


Debian 2.2r5 Released

Debian potato has been updated to 2.2r5. See the press release for info on what has changed - mostly bugfixes, of course, since this is the stable distribution.

21 of 207 comments (clear)

  1. Accepted/rejected packages list by Chocky2 · · Score: 4, Informative

    A comprehensive list of which packages were included and which were rejected is at http://people.debian.org/~joey/2.2r5/full.html

  2. Actually, it's not bugfixes by bconway · · Score: 4, Informative

    It's a release for security updates. This is very different from a bugfix release, which would generally be a much greater undertaking and require a lot more packages to be upgraded to newer versions. Think of it this way: a security update would be when Slash code allows users to gain the access levels of other users, including elevated privileges. A bugfix release would be an increment in the Slash code that fixes broken features that do not include security compromises. Makes sense? =)

    --
    Interested in open source engine management for your Subaru?
    1. Re:Actually, it's not bugfixes by noahm · · Score: 2, Informative
      That's not true at all. For example, look at the changelog for bwbasic in 2.2r5:

      "* Recompile. Due to strange interactions with libc6, functions weren't interpreted, and the package was practically unusable. Closes: #108924."

      noah

  3. Re:stable vs. unstable by reaper20 · · Score: 3, Informative

    check debianplanet.org for thee thread, i believe most of the libpng issues have been taken care of.

  4. Re:Woody by barawn · · Score: 4, Informative

    Actually, isn't "unstable" 'Sid'? I think 'Woody' is the "testing" release.

  5. Re:stable vs. unstable by awptic · · Score: 3, Informative

    I've run into this same problem with libpng on my system running debian unstable, I found an article discussing a fix at www.varlinux.org
    To summarize what needs to be done though:

    rm -f /usr/lib/libpng.so.3
    ln -s /usr/lib/libpng.so.2.0.1.12 /usr/lib/libpng.so.3

    I just did an apt-get upgrade a few minutes ago and it undid this, I haven't noticed any problems yet so maybe they've already fixed this issue.

  6. Re:stable vs. unstable by FlyingDragon · · Score: 5, Informative
    If you find stable a bit stoic and unstable a little wild, Debian has another distribution you may find just right: testing.

    Testing consists of packages from unstable that have gone a couple weeks without incident. The result is a very current system with the bleeding edge problems smoothed over. Most of our production boxes are now on it.

  7. Debian unstable by ShecoDu · · Score: 2, Informative

    For those of you who would want to use debian unstable, update your /etc/apt/sources.list to be like this, debian unstable is not really unstable after all, its just that the list might be broken some times:

    # See sources.list(5) for more information, especialy
    # Remember that you can only use http, ftp or file URIs
    # CDROMs are managed through the apt-cdrom tool.
    deb ftp://ftp.us.debian.org/debian unstable main contrib non-free
    deb ftp://non-us.debian.org/debian-non-US unstable/non-US main contrib non-free

  8. Re:ssh v1? 1:1.2.3-9.4? by Colm@TCD · · Score: 3, Informative
    The middle one. Although potato has ssh 1.2.3, it's been patched so as not to be vulnerable to the ssh1 exploit.

    There are systematic weaknesses with version 1 of the ssh protocol, which this doesn't address, of course. However, as far as I'm aware, a successful exploit has yet to be mounted against these.

  9. Re:ssh v1? 1:1.2.3-9.4? by noahm · · Score: 3, Informative
    Read the changelog for the ssh package. /usr/share/doc/ssh/changelog.Debian.gz. It is still SSH protocol 1, but the ssh daemon is patched to address recent remote exploit vulnerabilities. There are no known vulnerabilities in the version of OpenSSH included with Debian 2.2r5.

    Still, though, version 2 of the SSH protocol is better, and building updated OpenSSH packages for potato is not difficult. The 'source' command in apt-get is very helpful here.

    noah

  10. Re:Why dont you update the damm Kernel by nickjennings · · Score: 2, Informative

    you don't need to install the 2.4 kernel from source on a Debian system (stable). Use the 2.4 packages built for stable maintained by Adrian Bunk.

    Add the following line to your /etc/apt/sources.list

    deb http://people.debian.org/~bunk/debian potato main

    run dselect and update your package list, then make sure you select one of the 2.4 kernels, it will upgrade several base packages to support the new kernel, but it works absolutely perfect!

  11. Re:Woody by Gannoc · · Score: 4, Informative
    it should give you a few simple steps on how to upgrade to Woody...

    Wow, you're going to get 32767 responses to this.

    1. #vi /etc/apt/sources.list

    2. Change all instances of "stable" or "potato" to "woody".

    3. #apt-get dist-upgrade

    (4.) #apt-get -f install ;apt-get dist-upgrade --yes , until it all works.

    ;)

  12. Yes! Use the debian testing distribution. by brlewis · · Score: 3, Informative

    I used to run debian stable, but switched to testing several months ago. I think testing is the dist for most users. Too bad newbies get steered toward stable. The testing dist is stable enough for just about everybody.

  13. Actually, it is bugfixes (and more) by hal9000 · · Score: 4, Informative

    In fact, here are the requirements for a package to make it into a Debian stable revision:
    (from http://people.debian.org/~joey/2.2r5/)

    [Joey Hess's] requirements for packages to go into stable:
    1. The package fixes a security problem. An advisory by our own Security Team would be quite helpful.
    2. The package fixes a critical bug which can lead into data loss, data corruption, or an overly broken system, or the package is broken or not usable (anymore).
    3. The stable version of the package is not installable at all due to broken or unmet dependencies or broken installation scripts
    4. The package gets all architectures in stable in sync.
    5. All released architectures have to be in sync.

    --
    Look out honey, 'cause I'm using technology; Ain't got time to make no apology
  14. Re:And I just put 2.2r4 on yesterday.... by ThorGod · · Score: 2, Informative

    You update /etc/apt/sources.list to whatever distribution you want to upgrade to, and run apt-get update ; apt-get upgrade.

    --
    PS: I don't reply to ACs.
  15. Re:Debian sucks nuts by barawn · · Score: 3, Informative

    Re: ISOs:

    Limited bandwidth - that's all I have to say. Most people don't need the ISOs.

    Re: what Potato comes with
    If you had looked around on Usenet for about 2 seconds - I believe it's the second or third post in response to a search for "XFree86 4 potato" you'd find out how to upgrade Potato to Woody (testing) in about 5 minutes.

    Edit sources.list, replace stable with Woody.

    Apt-get update.
    Apt-get dist-upgrade.
    Wait, relax, enjoy.

    Re: the kernel
    Please. A 2.4 kernel isn't THAT necessary.

  16. Re:Debian is odd by mbanck · · Score: 2, Informative
    Debian is a great distro, don't get me wrong, but they need to stop screwing around with Potato and get Woody released.

    chill. Most Debian Developers are working for woody, alright? It's just that some of us do release security updates, if you don't mind. And then _one_ person (joey) does point-releases by getting all the security stuff and critical bugfixes together. No big deal. No Debian Developer is working on stable packages apart from security updates, OK?

    Here is an example. I am not a KDE advocate or anything but I noticed that all versions of KDE is still listed as "testing" or "unstable"

    That might be because QT was not released under the GPL before the release of potato, hmm?. And no, we won't let something as big as KDE into stable. The biggest thing that went in was Mozilla-M18 (the original version in potato was Mozilla-M12 or something, go figure)

    October GNOME was not all that stable, and KDE 2.2.2 is one of the most stable desktops out there.

    Of course, but october GNOME was all that was there by the time of the release. AFAIK, there are unofficial KDE-packages for potato available on the web, but if you want to run KDE, then you're better off with woody or sid anyway. I hope your concerns are adressed by now. We know that we release too infrequently, we got the stuff in place to do this more often by now, so hope for the future, sorry. This point release is necessary for everybody who needs to install _rock-solid_ software without security issues, not for the latest whistles. Besides, this is probably not worth mentioning on ./ anyway.

    Michael

  17. Re:Woody by nomadic · · Score: 3, Informative

    Actually I always thought the correct usage on slashdot would be to use the teletype font to denote a typed command. After a quick bit of research I discovered that single quotation marks (') should be used in place of regular quotation marks when the word or phrase you're enclosing is in another set of regular quotation marks (i.e. "His exact words were, 'I used apt-get to install that package'")

    It can also be used when referring to words in an unusual context, so I guess if you don't use teletype the single quotation marks are the way to go.

    Maybe we need a Slashdot Manual of Style.

  18. Re:is being fat okay? by Faceprint · · Score: 3, Informative

    actually, apt-get install cruft, and then run cruft. It will remove old programs and libraries that aren't needed that you don't want anymore. It cleaned up my system quite a bit.

  19. Re:And I just put 2.2r4 on yesterday.... by steveha · · Score: 4, Informative

    Let me just ask a general question then - what's the best way to install a fresh Woody system? My current system is a bastardized Potato with some ugly Sid stuff thrown in to make it complicated. I want a Woody system, upgraded to a 2.4 kernel with ipfilter, and I'm willing to start from scratch.

    Do I remove all non-Woody sources from the apt-get sources file? Do I manually remove all potato and unstable packages? Or is it best to format and start over?


    First of all, if the only thing you really want is a 2.4.x kernel and ipfilter, you don't need to upgrade everything; you could just get kernel sources, build a 2.4.x kernel, and go from there.

    But if you want to update your system, here is what to do:

    Edit your sources.list file to point to a Debian mirror for the "unstable" packages. (Or "testing" if you want to try that, but I'm perfectly happy with unstable.)

    Run "apt-get update", which fetches the list of new packages.

    Run "apt-get dist-upgrade", which downloads the new packages and installs them.

    The Debian APT system is really cool, but it isn't absolutely perfect. It will try to install packages like libc first, and then later on install packages that depend on the other packages; but sometimes it fails. Sometimes it will try to install a package, only to have the install fail because some needed package wasn't there. This especially happens when upgrading from Potato to unstable.

    The solution is simple: you just keep running "apt-get dist-upgrade", over and over, until it reports that all packages installed. Each time more packages will install, as the dependencies get installed.

    I've done this about twice, and that's what worked for me.

    steveha

    --
    lf(1): it's like ls(1) but sorts filenames by extension, tersely
  20. Re:The problem with Debian... by dondelelcaro · · Score: 1, Informative

    The problem with Debian is that it's too stable.

    That's the oddest complaint about an OS that I've heard in a while.

    Yes. The stable distribution of debian is stable. If you want the newest wiz-bang stuff, you use testing or unstable. It's that simple. My servers that need to be up 24x7 run stable. My workstation runs unstable with custom packages.

    You also don't need to use dselect to install stuff. Haven't you used apt-get yet? Even the install process has a redhat like package selector for people who don't want the power (and hassle) of dselect.

    --
    http://www.donarmstrong.com