Debian GNU/Linux 2.1r5 Released

February 16th, 2000

A new update of the Debian GNU/Linux 2.1 release (aka slink) has been released. The new release, version 2.1r5, includes both security and Y2K updates.

We are currently not aware of any outstanding Y2K problems in 2.1r5. If we learn of new problems we will provide updates at http://ftp.debian.org/debian/dists/slink-updates/.

Here is a complete list of the packages that have changed with this release:

Security updates:

  package      : kernel-source-2.0.38
  version      : 2.0.38-2
  architectures: i386
  issue        : fix IP exploit.

  package      : nvi
  version      : 1.79-9.1 (m68k: nvi_1.79-9.2)
  architectures: i386 alpha sparc m68k
  issue        : Fixed vulnerability in nviboot. It was possible for someone
                 to erase files in the root directory by creating files in nvi's
                 recovery directory with embedded spaces.

  package      : lpr
  version      : 0.48-0.slink2
  architectures: i386 m68k alpha sparc
  issue        : remote exploit

  package      : apcd
  version      : 0.6a.nr-4slink1
  architectures: i386 m68k alpha sparc
  issue        : fixed an important security bug when apcd gets SIGUSR1 signal
  
  package      : htdig
  version      : 3.1.5-0.1
  architectures: i386 m68k alpha sparc
  issue        : Remote users could abuse htsearch and read files they
                 should not be able to read   

Y2K updates:

  package      : tetex-bin
  version      : 0.9.981113-4
  architectures: i386 alpha sparc m68k
  issue        : y2k pbm in index updating (?)
  
  package      : nethack
  version      : 3.2.3-3
  architectures: i386 alpha sparc m68k
  issue        : y2k pbm in log files.
  
  package      : emacs19
  version      : 19.34-21.1
  architectures: i386 (not compiled on alpha, sparc, m68k)
  issue        : Y2K fix in lisp/timezone.el
  
  package      : emacs20  
  version      : 20.5a-1.99
  architectures: i386 m68k sparc (not compiled on alpha)
  issue        : Y2K fix in lisp/timezone.el  
  
  package      : pilot-manager
  version      : 1.106-2.1
  architectures: all
  issue        : Added Y2K patch from BR #53831
  
  package      : calamaris
  version      : 2.8-4  
  architectures: all
  issue        : Correcting an ugly Y2K bug: date should show as '00'
                 instead of '100'.
                                  
  package      : dtaus            
  version      : 0.3-2
  architectures: i386 m68k sparc alpha
  issue        : Applied y2k fix *sigh* [sic]
                                             
  package      : fml
  version      : 3.0+beta.20000106-0slink1
  architectures: all
  issue        : fix some y2k problems
  
  package      : sendfile
  version      : 2.1-8.1
  architectures: i386 m68k sparc alpha
  issue        : Corrected date routine, removes y2k bug (Bug#53817)
                                                                    
  package      : hyperlatex                                         
  version      : 2.3.1-3.0.1
  architectures: all        
  issue        : Fix a Y2K bug in a date regexp.
                 
  package      : webalizer        
  version      : 1.20-5           
  architectures: i386 m68k sparc alpha
  issue        : Y2K fix (some %d -> %02d printf format string changes)
  
  package      : leafnode                    
  version      : 1.6.2-3
  architectures: i386 sparc m68k alpha
  issue        : Y2K fix.
  
  package      : nntp
  version      : 1.5.12.1-7slink1
  architectures: i386 m68k alpha (no sparc)
  issue        : Y2K fix.
  
  package      : wml                                                
  version      : 1.6.8-1                                            
  architectures: i386 m68k sparc alpha
  issue        : Y2K fix.   
  
  package      : cnews
  version      : cr.g7-12.1       
  architectures: i386 m68k sparc alpha
  issue        : Y2K fix for date parsing routines
  
  package      : eperl
  version      : 2.2.14-0.3                  
  architectures: i386 m68k alpha (no sparc)
  issue        : Integrated y2k patch from BR #54278.
  
  package      : groff
  version      : 1.15.1.11a.7.Y2K-1
  architectures: i386 sparc alpha m68k
  issue        : Y2K fix.
  
  package      : inn
  version      : 1.7.2-4.2                                          
  architectures: i386 m68k sparc alpha                              
  issue        : Added patch from BR #53813 to fix a y2k bug.
  
  package      : mush
  version      : 7.2.5unoff2-7.0.1
  architectures: i386 m68k (no alpha, no sparc)
  issue        : Applied patch from BR #53935 to fix a y2k bug.
  
  package      : adjtimex
  version      : 1.6-2.2
  architectures: i386 sparc alpha m68k       
  issue        : Added patch to fix #54119 (Y2K display problem).
  
  package      : im
  version      : 1:100-3
  architectures: all
  issue        : Scan.pm y2k problem: Messages without "Date:" fields
                 will be processed wrongly in 2000 or later.
                                                
  package      : isdnutils                      
  version      : 1:3.0-12slink14                                    
  architectures: i386 alpha (no sparc, no m68k)                     
  issue        : Y2K fix for isdnlog (date received from ISDN line wasn't
                 interpreted correctly).                                 
  
  package      : tetex-base
  version      : 0.9.981113-2
  architectures: all
  issue        : y2k fix for dinbrief.cls. dinbrief.cls displayed 100 as
                 the current year in 2000. (closes: Bug#54385)
  
  package      : mirror
  version      : 2.9-13slink15
  architectures: all
  issue        : fix y2k pbm in log messages
  
  package      : perl
  version      : 5.004.04-7.0.1 (sparc: 5.004.04-7.1.1)
  architectures: i386 alpha sparc m68k
  issue        : Wrote a patch to fix y2k bug in pod2man. (closes: #54802)
  
  package      : slrn
  version      : 0.9.5.7-16.0.9.5.3.6
  architectures: i386 sparc alpha m68k
  issue        : versions older than 0.9.5.4 are not y2k-compliant.                             
                                                                  
  package      : xinetd
  version      : 2.2.1-8.1   
  architectures: i386 sparc m68k alpha
  issue        : versions older than 0.9.5.4 are not y2k-compliant.
                 
  package      : cbb
  version      : 0.8.1-1
  architectures: all
  issue        : Upgrade to lastest upstream version to fix y2k bug (#53846).
  
  package      : filerunner
  version      : 2.5.1-0.1
  architectures: i386 m68k alpha (no sparc)
  issue        : Y2k fixes (Bug #54274).
  
  package      : http-analyze
  version      : 1.9e-4.2
  architectures: i386 sparc alpha m68k
  issue        : Modify http-analyse.c to fix Y2K bug (#54029).
                                                                  
  package      : libwww-perl                                   
  version      : 5.36-1.1
  architectures: all
  issue        : Fix Y2K bug; function HTTP::Date::str2time didn't work
                 with dates >= 2000 (#54202).                          

Other updates:

  package      : cvs
  version      : 1.10.7-1.99.slink.y2k.1
  architectures: i386 m68k alpha sparc
  issue        : Fix pbm introduced in 2.1r4 (package used /usr/share/doc)
  
  package      : vflib2
  version      : 2.24.2-2.99.slink.1
  architectures: i386 m68k alpha sparc
  issue        : Fix pbm introduced in 2.1r4 (package used /usr/share/doc)
  
  package      : gs
  version      : 5.10-3.99.slink.0                                
  architectures: i386 sparc                                    
  issue        : Fix pbm introduced in 2.1r4 (package used /usr/share/doc)
  
  package      : lprng
  version      : 3.5.2-2.1
  architectures: sparc only
  issue        : fix dependency problem preventing the creation of sparc CDs

  package      : boot-floppies
  version      : 2.1.9.2
  architectures: m68k only
  issue        : note odd version; not official release - update of m68k boot
                 images (previous version is broken)