Okay, everybody... It's that time again. I've gone through the bug logs and made my list of packages to keep/remove should they still have release-critical (i.e. critical, grave, or important) bugs at ship time.
The following bugs are for packages I don't think we can ship 2.1 without: apache-common 25990 apache-common: apache expects passwd.db but not dbmmanage [54] (Johnie Ingram <[EMAIL PROTECTED]>) apache-ssl 26012 apache-ssl: usage of /tmp/ssl.log is a security hole [54] (Christoph Martin <[EMAIL PROTECTED]>) base-passwd 25882 various system users inherited my personal gid (100) ! [57] (Galen Hazelwood <[EMAIL PROTECTED]>) bash 27661 bash handling of if/fi broken when "sourced" [0] (Guy Maor <[EMAIL PROTECTED]>) boot-floppies 26584 lomem install doesn't activate swap [34] (Enrique Zanardi <[EMAIL PROTECTED]>) boot-floppies 27061 boot-floppies' .bash_profile for root prompt for pkgsel is confusing [19] (Enrique Zanardi <[EMAIL PROTECTED]>) cron 26705 RedHat (possible) buffer overflow fixes [29] (Steve Greenland <[EMAIL PROTECTED]>) dpkg 1797 upgrade/downgrade dependency calculation problem [1075] (Klee Dienes and Ian Jackson <[EMAIL PROTECTED]>) dpkg 17624 dpkg: installs regular dir when .deb contains symlink ! [257] (Klee Dienes and Ian Jackson <[EMAIL PROTECTED]>) dpkg 20401 Problems updating bo -> hamm [198] (Klee Dienes and Ian Jackson <[EMAIL PROTECTED]>) dpkg 21182 dpkg: dpkg can go into an infinite loop with --force-configure-any [181] (Klee Dienes and Ian Jackson <[EMAIL PROTECTED]>) dpkg 26880 dpkg: Creating XF86Config during install freezes VT [23] (Klee Dienes and Ian Jackson <[EMAIL PROTECTED]>) dpkg-dev 25405 xpm: builds libc5 package on powerpc [70] (Klee Dienes and Ian Jackson <[EMAIL PROTECTED]>) fakeroot 27794 fakeroot: fakeroot depends on missing library [0] (joost witteveen <[EMAIL PROTECTED]>) fetchmail 23092 Security: fetchmail sends packets off site without explicit permission [133] (Paul Haggart <[EMAIL PROTECTED]>) ftp.debian.org 25761 ftp.debian.org: No standard naming convention for mirrors.. [59] (Guy Maor <[EMAIL PROTECTED]>) ftp.debian.org 26920 ftp.debian.org: package installation procedure problem [22] (Guy Maor <[EMAIL PROTECTED]>) ftp.debian.org 27381 libg++272-dev and libstdc++2.8-dev conflict, being both standard!! [11] (Guy Maor <[EMAIL PROTECTED]>) ftp.debian.org 27642 exim needs to be made standard, smail needs to be made optional [0] (Guy Maor <[EMAIL PROTECTED]>) gcc 26100 gcc: -dynamic is not default as it should be [50] (Galen Hazelwood <[EMAIL PROTECTED]>) groff 27790 groff depends on missing libary. [0] (Fabrizio Polacco <[EMAIL PROTECTED]>) libc6 26147 dlopen() corrupts heap, dlclose() reads free()'d memory [49] (Dale Scheetz <[EMAIL PROTECTED]>) libc6 27314 libc6: wrong shlibs file [12] (Dale Scheetz <[EMAIL PROTECTED]>) libc6 27334 libc6: breaks sendmail, probably problem in resolver [12] (Dale Scheetz <[EMAIL PROTECTED]>) libc6 27403 libc6: fsck error occure after ldconfig [10] (Dale Scheetz <[EMAIL PROTECTED]>) libc6-doc 26984 libc6-doc: info files problem. [21] (Dale Scheetz <[EMAIL PROTECTED]>) libpam0g 27514 libpam moved without warning! [8] (Klee Dienes <[EMAIL PROTECTED]>) libreadlineg2 27762 libreadlineg2 links in old ncurses [0] (Guy Maor <[EMAIL PROTECTED]>) mount 27421 mount: fails to parse existing /etc/fstab [10] (Vincent Renardias <[EMAIL PROTECTED]>) netstd 27789 netstd depends on libstdc++2.8 [0] (Herbert Xu <[EMAIL PROTECTED]>) nis 26294 package is out of date; makedbm does not handle "\" extended lines longer than 120 characters [43] (Miquel van Smoorenburg <[EMAIL PROTECTED]>) nonus.debian.org 18572 nonus.debian.org: remove des-solnet_1.03-5.deb [231] (Sven Rudolph <[EMAIL PROTECTED]>) nonus.debian.org 18785 nonus.debian.org: incoming backlog [225] (Sven Rudolph <[EMAIL PROTECTED]>) nonus.debian.org 18887 des-solnet: package description [222] (Sven Rudolph <[EMAIL PROTECTED]>) nonus.debian.org 20773 nonus.debian.org: please remove gnupg from frozen [190] (Sven Rudolph <[EMAIL PROTECTED]>) nonus.debian.org 21423 Dpkg-ftp can't handle alternative distributions [177] (Sven Rudolph <[EMAIL PROTECTED]>) nonus.debian.org 22287 nonus.debian.org with incorrect layout [157] (Sven Rudolph <[EMAIL PROTECTED]>) nonus.debian.org 23642 Packages [118] (Sven Rudolph <[EMAIL PROTECTED]>) nonus.debian.org 25198 nonus.debian.org: Packages don't exist [76] (Sven Rudolph <[EMAIL PROTECTED]>) perl 27604 Perl @INC needs /usr/lib/perl5 [7] (Darren Stalder <[EMAIL PROTECTED]>) perl 27738 perl: @INC does not contain /usr/lib/perl5 [0] (Darren Stalder <[EMAIL PROTECTED]>) sendmail 26106 sendmail postinst is not tolerant of warnings [50] (Richard Nelson <[EMAIL PROTECTED]>) slang1 27385 slang1: Still no source package [11] (Chris Fearnley <[EMAIL PROTECTED]>) ssh 27415 ssh suddenly requires controlling tty [10] (Philip Hands <[EMAIL PROTECTED]>) svgalibg1 25878 svgalib: security hole [57] (Andy Mortimer <[EMAIL PROTECTED]>) tetex-base 27895 tetex-base config problem [0] (Christoph Martin <[EMAIL PROTECTED]>) xemacs20-bin 25676 xemacs20-bin: GNUS: Insecure MIME extraction [62] (James LewisMoss <[EMAIL PROTECTED]>) If you feel otherwise, please let me know. These bugs remaining open will delay the release of Debian 2.1 (currently planned for the end of November). The following are packages I feel we can remove: ada-rm 27918 ada-rm: This large package should be architecture: all [0] () apple2 27590 apple2: should be in contrib, not main [7] (Tom Lear <[EMAIL PROTECTED]>) balsa 27726 balsa cannot be run [0] ([EMAIL PROTECTED] (Ole J. Tetlie)) balsa 27894 balsa is linked against ancient version of gtk [0] ([EMAIL PROTECTED] (Ole J. Tetlie)) cvs-pcl 22577 compile of pcl-cvs.el fails (cannot load "cookie") [149] (Tom Lees <[EMAIL PROTECTED]>) dhcp-client-beta 18322 dhclient-script problem with "EXPIRE" [238] (Rich Sahlender <[EMAIL PROTECTED]>) dhcp-client-beta 19767 dhcp-client-beta has no /usr/doc directory [211] (Rich Sahlender <[EMAIL PROTECTED]>) freetype2-dev 27814 freetype2-dev: should not conflict with freetype1 [0] (Anthony Fok <[EMAIL PROTECTED]>) gnome-gnothello 27405 gnome-gnothello doesn't run here [10] (James LewisMoss <[EMAIL PROTECTED]>) gnus 25609 Gnus: prerm script failure make it impossible to upgrade/pruge [64] (Michael Alan Dorman <[EMAIL PROTECTED]>) htdig 25412 htdig: htdig ignores config file stuff/absolute pathnames compiled in [70] (Gergely Madarasz <[EMAIL PROTECTED]>) infocom 21478 infocom: Integrating infocom interpreters [175] (Brian White <[EMAIL PROTECTED]>) jdk1.1 27097 jdk1.1: error in installing jdk1.1: links are in a mess [18] (Stephen Zander <[EMAIL PROTECTED]>) jdk1.1 27330 jdk1.1: Files should be conffiles [12] (Stephen Zander <[EMAIL PROTECTED]>) jove 27219 jove: Jove wants /usr/tmp [14] (Loic Prylli <[EMAIL PROTECTED]>) junkbuster 25258 junkbuster: junkbuster has security holes [74] (Paul Haggart <[EMAIL PROTECTED]>) kaffe 20980 kaffe: kaffe depends on jdk-common [186] () kdebase 23655 kdebase includes /etc/X11/Xsession [118] (Stephan Kulow <[EMAIL PROTECTED]>) kdebase 25903 kdebase doesn't include rights to distribute kvt [56] (Stephan Kulow <[EMAIL PROTECTED]>) kdebase 25974 kvt creates ~/.kde with root as owner and insane permissions [55] (Stephan Kulow <[EMAIL PROTECTED]>) kdegraphics 25627 kdegraphics violates copyright [63] (Stephan Kulow <[EMAIL PROTECTED]>) kdelibs0g 24643 kdebase: We have no licence to distribute KDE binaries when linked against Qt [90] (Stephan Kulow <[EMAIL PROTECTED]>) kdemultimedia 25628 kmultimedia violates copyright law (and debian policy) [63] (Stephan Kulow <[EMAIL PROTECTED]>) kdeutils 25630 kdeutils copyright problems [63] (Stephan Kulow <[EMAIL PROTECTED]>) knfs 27250 knfs (remote root exploit) [14] (Anders Hammarquist <[EMAIL PROTECTED]>) libmagick4-dev 19332 libmagick: ldconfig-symlink-before-shlib-in-deb LI#67 [217] ([EMAIL PROTECTED] (Scott K. Ellis)) libpgjava 27753 libpgjava: depends on jdk1.1-runtime, which is now included in jdk1.1 [0] (Oliver Elphick <[EMAIL PROTECTED]>) lists-archives 26384 lists-archives: Missing conffiles [40] (Johnie Ingram <[EMAIL PROTECTED]>) mozilla 27181 mozilla dumps core [15] (Debian QA group <debian-qa@lists.debian.org>) netatalk 25598 netalk: several problems (and the solution) [64] (Joel Klecker <[EMAIL PROTECTED]>) pcmcia-modules-2 27395 pcmcia-modules are totally broken out of the box [11] (Brian Mays <[EMAIL PROTECTED]>) pcmcia-source 26657 pcmcia-source: Needs this patch to work on 2.1.118+ kernels [32] (Brian Mays <[EMAIL PROTECTED]>) pil 27495 package pil should be python-pil [8] (Matthias Klose <[EMAIL PROTECTED]>) qftp 27791 qftp depends on missing libary. [0] ([EMAIL PROTECTED] (Robert S. Edmonds)) qps 16635 qps: qps seems to be statically linked with QT and is in the wrong section [281] (Hanno Wagner <[EMAIL PROTECTED]>) rt 23583 rt: lacking copyright [120] (Ender <[EMAIL PROTECTED]>) secure-su 26827 secure-su breaks findutils (And who knows what else) [25] (Guy Maor <[EMAIL PROTECTED]>) smb2www 27641 perl 5.005-02 breaks smb2www [0] (Craig Small <[EMAIL PROTECTED]>) strace 26065 strace confused about sigaction flags [51] (Wichert Akkerman <[EMAIL PROTECTED]>) tkstep8.0 19255 Tkstep8.0 doesn't mention dependencies on tiff, jpeg and Xpm. [218] (Federico Di Gregorio <[EMAIL PROTECTED]>) vrwave 23436 vrwave should maybe go in contrib? [124] (Javier Fernandez-Sanguino Pen~a <[EMAIL PROTECTED]>) xephem 19441 xephem-smotif: no-copyright-file LI#177 [217] (Frank Jordan <[EMAIL PROTECTED]>) xswallow 25932 Xswallow should be in contrib [55] (Javier Fernandez-Sanguino Pen~a <[EMAIL PROTECTED]>) yagirc 24747 yagirc: Binary and Libs for yagirc stored in /bin and /lib [87] ([EMAIL PROTECTED] (David N. Welton)) Again, please let me know if you feel differently. If I don't hear otherwise, I'll be removing all of those packages in the list directly above to be removed from slink during the freeze. Note: the above lists are made directly from the bug logs. I haven't actually correlated them with the list of packages that actually exist. If a package listed above has already been removed from the distribution, don't worry about it. People who wish to help prepare for the release of Debian 2.1 should take a look at the bugs and see what they can do to resolve them. Please contact the maintainer before actually doing anything, though, so they can coordinate your efforts with theirs and other volunteers. Thanks! Brian ( [EMAIL PROTECTED] ) ------------------------------------------------------------------------------- Seize the moment! Live now. Make "now" always the most important time. -- JLP