Preparation of Debian GNU/Linux 2.2r3

Up-to-date version on

I'm currently preparing 2.2r3 and will send reports so people can actually comment on it. I'm sortof responsible for this release, however Anthony Towns has to give the final approval for each package. I, however, can and will try to make his work as easy as possible in the hope to get the next release out real soon now.

My requirements for packages to go into stable:

1. The package fixes a security problem. Quite helpful would be an advisory issued by the Security Team already.

2. The package fixes a critical bug which can lead into data loss, data corruption or an overly broken system.

3. The stable version of the package is not installable at all due to broken or unmet dependencies or broken installation scripts

4. The package gets all architectures in stable in sync.

5. All released architectures have to be in sync.

Packages that I probably reject:

. Package that fixes non-critical bugs

. Misplaced uploads, i.e. packages that were uploaded to 'stable unstable'

. Packages that are out of sync

Accepted packages

These packages should make it into stable.


Anthony Fok says: Since multiple users have filed bugs against the NLS problem, it is safe to assume that this problem affects a significant minority of all users,. (PDF files often undisplayable or unprintable without the fix unless they manually set LANG=C or something like that...) So 4.05-3 does indeed: fix an "important" bug that inconvenience quite a few users; or for newbie users, they don't even know how to fix it with LANG=C...

Changelog says:

* Added a line in /usr/lib/mime/packages/acroread to force Netscape use the Acroread PDF plugin. Thanks to Thibaut Cousin for reporting the bug and and to fellow Debian developer Ryan Murray for providing the fix. Closes: Bug#79333

* Acroread has some NLS issues that broke viewing and printing for international users when the decimal separator is not a dot. A patch is applied to the acroread wrapper script to set LC_NUMERIC. Thanks to Mirek, Serge Gavrilov, Sebastien Cabot for their bug reports, and special thanks to Florian Siegesmund for providing a patch ported from the netscape wrapper script written by H. Peter Anvin et al. Closes: Bug#66586, #66593, #76840, #86473.

* Moved /usr/X11R6/bin/acroread back to /usr/bin/acroread. :-)

* Added menu hints="PDF". Thanks, Arthur Korn! Closes: Bug#82321.

* Acroread 4.05 does support type-in fields for fill-in forms. Closes: Bug#36451.

analogupdates1:4.01-1potato1alpha, arm, i386, m68k, powerpc, sparc

Security Update

apacheupdates1.3.9-13.2alpha, arm, i386, m68k, powerpc, sparc

Security Update

apache-sslstable1.3.9.13-2alpha, i386, m68k, powerpc, sparc

Get architectures in sync.

This is non-US.


Fix unmet dependency in potato

bindupdates1:8.2.3-0.potato.1alpha, arm, i386, m68k, powerpc, sparc
bind-devupdates1:8.2.3-0.potato.1alpha, arm, i386, m68k, powerpc, sparc
dnsutilsupdates1:8.2.3-0.potato.1alpha, arm, i386, m68k, powerpc, sparc

Security Update


Install, uses an updated kernel and other improvements.

Other architectures are not able to hold the release, since boot-floppies are normally out of sync. There are too few porters around working on it.

m68k: Christian recently relocated to the US, and no one else is willing to do boot-floppies. Jonathan McDowell is working on them.

arm: Peter Naulls or Wookey plan to build them within the next two weeks. Philip Blundell is working on them today (Apr 15th).

console-aptstable0.7.7.2potato2i386, m68k, powerpc, sparc
console-aptupdates0.7.7.2potato2alpha, arm

Get stable packages in sync

cronupdates3.0pl1-57.2alpha, arm, i386, m68k, powerpc, sparc

Security Update



Fixed cslatex stops installation (closes: #67214, #69224)

cupsys-bsdupdates1.0.4-9i386, m68k, powerpc, sparc
cupsysupdates1.0.4-9i386, m68k, powerpc, sparc
libcupsys1-devupdates1.0.4-9i386, m68k, powerpc, sparc
libcupsys1updates1.0.4-9i386, m68k, powerpc, sparc

Security upload

Packages compiled for alpha and arm uploaded.

No advisory yet, due to audit in progress

deditstable0.5.11alpha, i386, m68k, powerpc, sparc

Get stable in sync

dialogupdates0.9a-20000118-3bisalpha, arm, i386, m68k, powerpc, sparc

Security Update

elvis-tinystable1.4-10arm, m68k, powerpc, sparc
elvis-tinystable1.4-11alpha, i386
elvis-tinyupdates1.4-11m68k, powerpc, sparc

ACCEPT: 1.4-11 REJECT: 1.4-12

Versions completely out of sync.

I would be convinced to let 1.4-11 go into stable to get architectures in sync again. However, since -12 was uploaded for arm, they are out of sync again. I'm not convinced the changes in -12 justify inclusion into stable.

Changelog for 1.4-11:

* The patch by Topi Miettinen to fix critical bug #74976 broke file recovery, but also the :w command. Re-engineered the patch so that the bug is fixed without any side-effects (closes: #77918)

* Add explanation by the author to clear up copyright notice (closes: #72021)

Changelog for 1.4-12: * Patch by David Douthitt to fix subsitition bug (closes: #73059)

* Patch by David Douthitt to fix range bug (closes: #55407)

* Move elvis-tiny to /bin (closes: #37571)

* Install wrapper in /bin/vi that execs /usr/bin/vi if it is present and /bin/elvis-tiny otherwise (closes: #72889)

* Install alternative for 'editor' (closes: #85318)

Arm compilation ready for upload on auric, requires 1.4-12 to be removed from proposed-updates

Miquel says: 1.4-12 was never meant to go into 'stable', I made a typo in the changelog file. I filed a bug against to fix the situation, which was done pretty quickly. Weird that -12 got into the arm port.

Maintainer: Miquel van Smoorenburg <>

emacs20-dlstable20.7-4arm, sparc
emacs20-dlstable20.7-5alpha, i386, m68k
emacs20-dlupdates20.7-5arm, sparc

Get stable in sync

eperlupdates2.2.14-0.7potato2arm, i386, m68k, powerpc, sparc

Security update, DSA 034

alpha uploaded by me, waiting for dinstall


Security Update

Compiled to sync versions in stable


Security Update

exuberant-ctagsupdates1:3.2.4-0.1alpha, arm, i386, m68k, powerpc, sparc

Security Upload, DSA 046

gabystable1.9.15-0.2alpha, i386, m68k, powerpc

Get architectures back in sync.

libc6-dbgupdates2.1.3-18arm, i386, m68k, powerpc, sparc
libc6-devupdates2.1.3-18arm, i386, m68k, powerpc, sparc
libc6-picupdates2.1.3-18arm, i386, m68k, powerpc, sparc
libc6-profupdates2.1.3-18arm, i386, m68k, powerpc, sparc
libc6updates2.1.3-18arm, i386, m68k, powerpc, sparc
libnss1-compatupdates2.1.3-18alpha, i386, m68k
localesupdates2.1.3-18alpha, arm, i386, m68k, powerpc, sparc
nscdupdates2.1.3-18alpha, arm, i386, m68k, powerpc, sparc

Security updates (advisory pending)

gnupgupdates1.0.4-2alpha, arm, i386, m68k, powerpc, sparc

* Apply security fix patch from Werner.

* Apply another patch from Werner to fix bogus warning on Rijndael usage.

This is non-US.

gnuplotstable3.7.1p1-4alpha, i386, m68k, powerpc, sparc

Get architectures back in sync.


Get versions in sync

jazipupdates0.33-1alpha, i386, m68k, powerpc, sparc

Security Update

Doesn't compile on arm due to no libforms

kernel-headers-2.2.18updates2.2.18-1alpha, i386
kernel-headers-2.2.19pre17updates2.2.19pre17-1alpha, i386, powerpc
kernel-headers-2.2.19updates2.2.19-2i386, powerpc
pcmcia-csupdates3.1.22-0.2potatoi386, powerpc

This looks quite screwed... However, since many of them, if not all, are new packages to stable, they are not likely to hurt. Since there are important security updates to 2.2.18 and above kernels at least most recent kernel versions need to be installed into stable. pcmcia-cs is a convenience package.

Herbert Xu: kernel-image-2.2.19pre* are not needed on i386/alpha.

libapache-mod-sslstable2.4.10-1.3.9-1alpha, i386, m68k, sparc
libapache-mod-sslupdates2.4.10-1.3.9-1arm, powerpc

Get architectures in sync

This is non-US.

libdb1-devstable1.85.4-4arm, sparc
libdb1stable1.85.4-4arm, i386, m68k, sparc

Syncing architectures

mailxupdates1:8.1.1-11alpha, arm, i386, m68k, powerpc, sparc

Security-Update, DSA 044

Bugfix to security-update

man-dbupdates2.3.16-1.1arm, i386, m68k, powerpc, sparc

Security Update

man2htmlupdates1.5-23alpha, arm, i386, m68k, powerpc, sparc

Security update, DSA 035, DoS

Alpha compiled & uploaded by me

gmcupdates4.5.42-11.potato.6alpha, arm, i386, m68k, powerpc, sparc
mc-commonupdates4.5.42-11.potato.6alpha, arm, i386, m68k, powerpc, sparc
mcupdates4.5.42-11.potato.6alpha, arm, i386, m68k, powerpc, sparc

Security update, DSA 036

mgetty-faxupdates1.1.21-3potato1alpha, arm, i386, m68k, powerpc, sparc
mgetty-viewfaxupdates1.1.21-3potato1alpha, arm, i386, m68k, powerpc, sparc
mgetty-voiceupdates1.1.21-3potato1alpha, arm, i386, m68k, powerpc, sparc
mgettyupdates1.1.21-3potato1alpha, arm, i386, m68k, powerpc, sparc

Security update, DSA 011

micqupdates0.4.3-4alpha, arm, i386, m68k, powerpc, sparc

Security update, DSA 012

libnspr4-devstableM18-3arm, i386, m68k, powerpc, sparc
libnspr4stableM18-3arm, i386, m68k, powerpc, sparc
mozilla-devstableM18-3arm, i386, m68k, powerpc, sparc
mozillastableM18-3arm, i386, m68k, powerpc, sparc

Get architectures in sync

mtoolsupdates3.9.6-4alpha, arm, i386, m68k, powerpc, sparc

Changelog says

* The following patches are needed to get mtools running on ARM:

- updated config.guess and config.sub

- recognize *-*-linux-gnu

- add "-mstructure-size-boundary=8" to the CFLAGS on ARM (closes: #79180)

All arch's in sync now.

Explanation from Adrian Bunk:

It was meant to go in potato: All the patches (except the changed maintainer address) are ARM-specific or save (I don't expect bugs with "updated config.guess and config.sub") and shouldn't affect other platforms. Currently, any call to one of the programs on ARM gives the error message:

Mtools has not been correctly compiled Recompile it using a more recent compiler

(Joey) If Netwinders would have a floppy drive I would be convinced.

Acorn and RiscPC have floppies.


Get versions back in sync.

muttstable1.0.1-9alpha, arm, powerpc, sparc
muttstable1.2.5-4i386, m68k
muttupdates1.2.5-4alpha, arm, powrepc, sparc

Get versions in sync

mysql-clientupdates3.22.32-6alpha, arm, i386, m68k, powerpc, sparc
mysql-serverupdates3.22.32-6alpha, arm, i386, m68k, powerpc, sparc

Security update, DSA 013, move to main again

Sparc, powerpc and alpha compiled & uploaded by me.

libmysqlclient6-devupdates3.22.30-4arm, alpha, i386, m68k, powerpc, sparc
libmysqlclient6updates3.22.30-4arm, alpha, i386, m68k, powerpc, sparc
mysql-gpl-clientupdates3.22.30-4arm, alpha, i386, m68k, powerpc, sparc

Security update, same as DSA 013

nanoupdates0.9.23-1alpha, arm, i386, m68k, sparc

Security Update

netpbm-devstable1:19940301.2-13alpha, arm, i386, m68k, powerpc, sparc
netpbm-devupdates1:19940301.2-15alpha, arm, i386, m68k, powerpc, sparc
netpbm-nonfreestable1:19940301.1-5alpha, arm, i386, m68k, sparc
netpbm-nonfreeupdates1:19940301.1-8alpha, arm, i386, m68k, powerpc, sparc
netpbm1stable1:19940301.2-13alpha, arm, i386, m68k, powerpc, sparc
netpbm1updates1:19940301.2-15alpha, arm, i386, m68k, powerpc, sparc
netpbmstable1:19940301.2-13alpha, arm, i386, m68k, powerpc, sparc
netpbmupdates1:19940301.2-15alpha, arm, i386, m68k, powerpc, sparc

* Moved non-free hpcdtoppm util from here to -nonfree package to fix important bug.

The upgrade path is safe now (two build-deps is missing and one too much... though)

nextawgupdates0.5.1-34potato1i386, m68k, powerpc, sparc
nextawupdates0.5.1-34potato1i386, m68k, sparc
xaw3dg-devupdates1.3-6.9potato1alpha, arm, i386, m68k, powerpc, sparc
xaw3dgupdates1.3-6.9potato1alpha, arm, i386, m68k, powerpc, sparc
xaw3dupdates1.3-6.9potato1i386, m68k
xaw95gupdates1.1-4.6potato1arm, i386, m68k, powerpc, sparc

Security update, DSA 037

nviupdates1.79-16aalpha, arm, i386, m68k, powerpc, sparc

Fixes possible document corruption. Changelog says:

Added Alexandero Viro's patch against possible document corruption. I think this is worth including in the next stable release. This is bug 77978

oshstable1.7-5arm, powerpc, sparc
oshstable1.7-6alpha, i386, m68k
oshupdates1.7-6arm, powerpc, sparc

Get versions in sync

pavukstable0.9pl24-1alpha, i386, m68k, powerpc, sparc

Get architectures in sync

This is non-US.

paxstable1:1.5-8alpha, arm, i386, m68k, powerpc

Get it back in sync

postfixupdates0.0.19991231pl11-1alpha, arm, i386, m68k, powerpc, sparc

* Upstream fixes (see /usr/share/doc/postfix/RELEASE_NOTES), including: - Postfix must no longer use DB 1.85 compatibility mode, because that mode loses the file lock while building a table, so that table lookups fail and MAIL IS LOST. Closes: #78812. - Confusing site_hog_factor is disabled by default. - As required by RFC822, Postfix now inserts a generic To: header if no destination header is not present. - postfix sendmail command no interprets '.' as end of message, unless the sendmail-compatible -i (or -oi) command line option is specified.

ecpgupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
libpgperlupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
libpgsql2updates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
libpgtclupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
odbc-postgresqlupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
pgaccessupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
postgresql-clientupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
postgresql-contribupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
postgresql-devupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
postgresql-plupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
postgresql-testupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
postgresqlupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc
python-pygresqlupdates6.5.3-26alpha, arm, i386, m68k, powerpc, sparc

Packages (-25) fixes a problem that can result in data loss, packages (-26) fix some nastyness with the prerm script

* Patch from (NOKUBI Takatsugu) and the PosgreSQL-J Mailing List to cure loss of data (under some circumstances) in vacuum. Closes: 81292

Arch's out of sync: i.e. sparc missing for -26

proftpdupdates1.2.0pre10-2.0potato1alpha, arm, i386, m68k, sparc

Security update

python-baseupdates1.5.2-10potato11alpha, arm, i386, m68k, powerpc, sparc
python-devupdates1.5.2-10potato11alpha, arm, i386, m68k, powerpc, sparc
python-gdbmupdates1.5.2-10potato11alpha, arm, i386, m68k, powerpc, sparc
python-mpzupdates1.5.2-10potato11alpha, arm, i386, m68k, powerpc, sparc
python-tkupdates1.5.2-10potato11alpha, arm, i386, m68k, powerpc, sparc
python-zlibupdates1.5.2-10potato11alpha, arm, i386, m68k, powerpc, sparc

Well, I'm not quite amused. I made a diff between the version from stable and proposed-updates. It's 9308 lines large (271kB).

* To the release manager: -11 includes a security fix to the tempfile module, which was vulnerable to a symlink attack. Apart from that, it contains an important fix for a long outstanding obscure bug in the signal handling code, and a few small modifications to fix some other bugs. This revision is a recompile of the unstable package for potato (one minor modification to mpzmodule was necessary to compile). I would think this revision should be included in the next point release of potato.


Removes one error that let's users see how wonderful python barfs.

sashupdates3.4-6alpha, arm, i386, m68k, powerpc, sparc

Security Update

screenstable3.9.5-8arm, sparc
screenstable3.9.5-9alpha, i386, m68k, powerpc
screenupdates3.9.5-9arm, sparc

Get versions back in sync

setiathomestable3.0-3m68k, powerpc
setiathomestable3.0-7alpha, i386, sparc
setiathomeupdates3.03-3alpha, i386, powerpc, sparc

Gregg Berkholtz says: The following text is from the main SETI@Home page ( "... SETI@home version 3.03 is available and mandatory for all supported platforms. Earlier versions are unable to contact our server, so please upgrade to version 3.03..." Also, in potato, the install fails due to the fact that it tries to fetch a now non-existent .tgz file.

Ok, this can be considered as reason for including it in stable. However:

New packages are missing for arm and m68k, they're missing upstream basically. Thus referring packages should probably be removed from stable.

sgml-toolsupdates1.0.9-15alpha, arm, i386, m68k, powerpc, sparc

Security update, DSA 038

slocateupdates2.4-2potato1alpha, arm, i386, m68k, powerpc, sparc

Security Update

slrnupdates0.9.6.2-9potato1alpha, arm, i386, m68k, powerpc, sparc
slrnpullupdates0.9.6.2-9potato1alpha, arm, i386, m68k, powerpc, sparc

Security update, DSA 040

splitvtupdates1.6.5-0potato1alpha, arm, i386, m68k, powerpc, sparc

Security Update

squidupdates2.2.5-3.1alpha, arm, i386, m68k, powerpc, sparc
squid-cgiupdates2.2.5-3.1alpha, arm, i386, m68k, powerpc, sparc
squidclientupdates2.2.5-3.1alpha, arm, i386, m68k, powerpc, sparc

Security Update

sshupdates1:1.2.3-9.3alpha, arm, i386, m68k, powerpc, sparc
ssh-askpass-gnomeupdates1:1.2.3-9.3alpha, arm, i386, m68k, powerpc, sparc

Security Update (1:1.2.3-9.2)

Sanity Update (broken conffile fix, non-security issue)

This is non-US.

stunnelupdates3.10-0potato1alpha, arm, i386, m68k, powerpc, sparc

Security Update

Arm upload from me, installed.

This is non-US.

sudoupdates1.6.2p2-2alpha, arm, i386, m68k, powerpc, sparc

Security update, DSA 031

syslog-ngupdates1.4.0rc3-3alpha, arm, i386, m68k, powerpc, sparc

Changelog says: Fix a DoS. Also Closes: #84353


I'm not convinced this package should go into stable but Anthony Towns is. Changelog:

* 'locales' now depends on version >= 2.1.3-17 because LC_COLLATE of zh_TW.Big5 was missing in Potato 2.2r2.

* Corrected description of task-chinese-t: changed "Simplified" to "Traditional".

Maintainer: Anthony Wong <>

A *lot* of Chinese users got bitten by the bug in the locales package in 2.2r2: the zh_TW.Big5 LC_COLLATE file was missing due to a packaging bug that finally got fixed (by me) in 2.1.13-17. A *lot* of users complained that Chinese didn't work in Debian 2.2r2, and we saw their complaints on mailing lists and newsgroups. That is why Anthony Wong uploaded this new version of task-chinese-t that depends on a correct locales package to make sure users' locales package get updated properly when they user "apt-get install task-chinese-t".

tcpdumpupdates3.4a6-6alpha, m68k, sparc

Security Update

Compiled by me to sync versions in stable


Misplaced upload, Changelog mentions 'stable unstable'. Approved by Anthony Towns.

Maintainer: Anthony Fok <>

Ryan Murray reported a "serious" bug... postinst would fail unless tetex-bin is already installed. It fixes problems in BOTH stable and unstable, so it is NOT an misplaced upload! (I.e. I know what I was doing!)

tinyproxyupdates1.3.1-2alpha, arm, i386, m68k, powerpc, sparc

Security Update

tmpreaperstable1.4.12alpha, arm, i386, m68k, powerpc

Get versions back in sync

traceroute-nanogstable6.0-2alpha, arm, i386, m68k, powerpc

Get architectures back in sync

uispstable0.1.6-4alpha, i386, m68k, powerpc
uispupdates0.1.6-4arm, sparc

Get architectures back in sync.

w3mupdates0.1.10+0.1.11pre+kokb23-1alpha, arm, i386, sparc
w3m-sslupdates0.1.10+0.1.11pre+kokb23-1alpha, arm, i386, sparc

This upload fixes a security problem, no advisory though, it's old also.

No powerpc or m68k packages of w3m available at all.

w3m-ssl is non-US.

watchdogupdates5.1-2alpha, arm, i386, m68k, powerpc, sparc

This upload fixes a broken version in potato which may result in the watchdog rebooting the machine during the upgrade.

1. Watchdog daemon is stopped

2. A whole lot of packages are unpacked

3. (sometimes) dpkg stops and prompts you to overwrite /etc/watchdog.conf

4. Watchdog daemon is restarted

wu-ftpdupdates2.6.0-5.3alpha, arm, i386, m68k, powerpc, sparc

Security Update (2.6.0-5.2)

Sanity Update (broken conffile fix, non-security issue)

gnuservupdates2.1alpha-5.1alpha, arm, i386, m68k, powerpc, sparc
xemacs21-binupdates21.1.10-5alpha, arm, i386, powerpc, sparc
xemacs21-mule-canna-wnnupdates21.1.10-5alpha, arm, i386, powerpc, sparc
xemacs21-muleupdates21.1.10-5alpha, arm, i386, powerpc, sparc
xemacs21-nomuleupdates21.1.10-5alpha, arm, i386, powerpc, sparc

Security update, DSA 042

m68k: xemacs21 doesn't build


Dunno why this should go into stable. Approved by Anthony Towns. Changelog says:

* Added code in postinst to rmdir /usr/X11R6/lib/X11/fonts/chinese if it is empty or just contains font.dir and fonts.alias (Closes: Bug#54994).

* [debian/control]: Removed an extraneous colon at the end of the Build-Depends line (Closes: #76505).

Maintainer: Changwoo Ryu <>

Changwoo Ryu is not the maintainer of the cmex font; I am. The upload closes a bug that may cause X fail to start after an upgrade. xfonts-cmex-big5p's former life, xfntbig5p-cmex24m, created the /usr/X11R6/lib/X11/fonts/chinese directory, but never removed it in postrm. Apparently, it was causing some problems for users who upgraded from xfntbig5p-cmex24m to xfonts-cmex-big5p. And of course, the second bug that it fixed, the extraneous colon at the end of the Build-Depends line, fix a "cannot build from source" bug.

rstartdupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
twmupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xbase-clientsupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xdmupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xextupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xfsupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xlib6g-devupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xlib6g-staticupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xlib6gupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xlib6-altdevupdates3.3.6-11potato32i386, m68k
xlib6updates3.3.6-11potato32i386, m68k
xmhupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xnestupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xproxyupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xprtupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xserver-commonupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xserver-fbdevupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xsmupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xtermupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc
xvfbupdates3.3.6-11potato32alpha, arm, i386, m68k, powerpc, sparc

Long awaited security update

xlockmore-glstable4.15-10alpha, arm, i386, m68k, powerpc
xlockmorestable4.15-10alpha, arm, i386, m68k, powerpc

Get architectures back in sync.

xpdfupdates0.90-8alpha, arm, i386, m68k, powerpc, sparc
xpdf-iupdates0.90-8alpha, arm, i386, m68k, powerpc, sparc

Bugfix, security update from stable broke the packages, this is a fix.

xpdf-i is in non-US.

xtideupdates2.2a-1alpha, arm, i386, m68k, powerpc, sparc


* The Debian source archive xtide_2.2.orig.tar.gz was not pristine and included tidal harmonics data downloaded from the XTide web site. It was recently discovered that some of the data included in the above archive may be in violation of copyright. Therefore, XTide's author removed the data in question from his web site and produced new harmonics files which were included in this 2.2a Debian version.


Convenience update as an exception. This upload adds a couple of more graphic cards to the database so more users will be able to auto-detect their graphic card. Since configuring the graphics card is still a pain, this improvement should go into stable.


This fixes a serious (affecting perhaps 15% of machines on which the powerpc port supports) booting bug.

* Use "MacRISC" instead of the entire list of machine types in <COMPATIBLE>. One line change, should fix booting on all recent machines. (Well, one line change in four places).

Need further investigation

These packages need further investigation. One reason the package is listed here could be that I'm not yet convinced this package should go into stable, but don't want to reject it entirely at the moment. Another reason could be that released and updated architectures are not in sync yet.

cfsstable1.3.3-7powerpc, sparc
cfsstable1.3.3-8alpha, i386, m68k

Get architectures in sync

PowerPC and sparc missing

This is non-US.

comerr-devupdates2.0-1.18-3.0potato1arm, i386, m68k, powerpc, sparc
e2fslibs-devupdates1.18-3.0potato1arm, i386, m68k, powerpc, sparc
e2fsprogsupdates1.18-3.0potato1arm, i386, m68k, powerpc, sparc
ss-devupdates2.0-1.18-3.0potato1arm, i386, m68k, powerpc, sparc
uuid-devupdates1.2-1.18-3.0potato1arm, i386, m68k, powerpc, sparc

Fix for serial console installs.

Alpha package is missing

Maintainer: Yann Dirson <>

icecast-clientstable1.0.0-1alpha, arm, i386, m68k, powerpc, sparc
icecast-serverstable1.0.0-1alpha, arm, i386, m68k, powerpc, sparc
icecast-serverupdates1.3.10-1i386, m68k

Alleged security update.

Changelog says:

* Several security exploits found to icecast. No simple way to patch

* old version, so upgrade to latest stable version from

* If questions or assistance needed join #icecast on IRC

Do you have a documentation about said security exploits? That's still pending

Is it something different than this one?

"icecast" is a server used to distribute audio streams to compatible clients such as winamp, mpg123, xmms and many others. Matt Messier ( and John Viega ( have identified several buffer overflow and format strings problems in Icecast that could be remotely exploited. Our latest update to this software changes the package to use an unprivileged user ("icecast") for the daemon, so the impact of this vulnerability is not as high. Recent distributions (CL >= 5.1) have this package compiled with StackGuard to make it more difficult to exploit buffer overflows.

It's said to be.

Clarification appreciated.

inn2-devupdates2.2.2.2000.01.31-4.1alpha, arm, powerpc
inn2-devupdates2.2.2.2000.01.31-5i386, m68k, sparc
inn2-inewsupdates2.2.2.2000.01.31-4.1alpha, arm, powerpc
inn2-inewsupdates2.2.2.2000.01.31-5i386, m68k, sparc
inn2updates2.2.2.2000.01.31-4.1alpha, arm, powerpc
inn2updates2.2.2.2000.01.31-5i386, m68k, sparc

Security Update

Bdale reports a serious problem with this upload, it broke some functionality. He's going to upload a fixed version, so this will have to wait for 2.2r4 then. Fixed for

alpha, arm, powerpc missing

libpapergstable1.0.3-13alpha, sparc
libpapergstable1.0.3-13.potato1arm, i386, m68k, powerpc
libpapergupdates1.0.3-13.potato1alpha, sparc
libpaperstable1.0.3-13.potato1i386, m68k

Broken sync upload.

If there would be libpaper *and* libpaperg version 1.0.3-13.potato1 for sparc, I'd be convinced to accept the package.

I have prepared an upload for libpaper *and* libpaperg binary packages sitting on auric, waiting for a free path to proposed-updates.

neditupdates1:5.1.1-3alpha, arm, i386, m68k, powerpc

nedit is now Free Software.

sparc missing

php4-cgi-gdupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgi-gdupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-cgi-imapupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgi-imapupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-cgi-ldapupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgi-ldapupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-cgi-mhashupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgi-mhashupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-cgi-mysqlupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgi-mysqlupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-cgi-pgsqlupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgi-pgsqlupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-cgi-snmpupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgi-snmpupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-cgi-xmlupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgi-xmlupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-cgiupdates4.0.3pl1-0potato1.1alpha, sparc
php4-cgiupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-gdupdates4.0.3pl1-0potato1.1alpha, sparc
php4-gdupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-imapupdates4.0.3pl1-0potato1.1alpha, sparc
php4-imapupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-ldapupdates4.0.3pl1-0potato1.1alpha, sparc
php4-ldapupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-mhashupdates4.0.3pl1-0potato1.1alpha, sparc
php4-mhashupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-mysqlupdates4.0.3pl1-0potato1.1alpha, sparc
php4-mysqlupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-pgsqlupdates4.0.3pl1-0potato1.1alpha, sparc
php4-pgsqlupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-snmpupdates4.0.3pl1-0potato1.1alpha, sparc
php4-snmpupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4-xmlupdates4.0.3pl1-0potato1.1alpha, sparc
php4-xmlupdates4.0.3pl1-0potato2i386, m68k, powerpc
php4updates4.0.3pl1-0potato1.1alpha, sparc
php4updates4.0.3pl1-0potato2i386, m68k, powerpc

Security Update

Roland Bauerschmidt reports "php4-cgi broken". Look at #89431. /usr/lib/cgi-bin/php4 is a symlink to debian/php4-cgi/usr/bin/php4 which of course doesn't exist.

Rebuild for 4.0.3pl1-0potato2 issued. Missing: alpha, sparc

Updated packages should be uploaded soon.

libreadlineg2stable2.1-19alpha, arm, powerpc
libreadlineg2updates2.1-21arm, m68k, powerpc, sparc

Get architectures back in sync

alpha missing

tksetistable2.12-2alpha, i386, sparc

Get versions back in sync.

PowerPC missing

unzip-cryptstable5.40-1.0alpha, i386, powerpc, sparc

Get architectures in sync.

m68k missing

This is non-US.

xcalstable4.1-8alpha, arm, i386, m68k, powerpc, sparc
xcalupdates4.1-9alpha, arm, i386, powerpc, sparc

aj: a calendar program getting days of a month wrong seems a decent thing to fix.

m68k missing

zopeupdates2.1.6-9alpha, arm, i386, m68k, powerpc

Security upload, DSA 043

Zope 2.1.6-7 indeed had two problems with two of the Hotfixes included, so I prepared a new version 2.1.6-8 and uploaded that to Incoming (target 'stable'):

First, Hotfix_2000-10-02 broke some stuff in 2.1.6 (the README said that this Hotfox_2000-10-02 would apply to 2.2.x and later, which is obviously correct). Therefore 2000-10-02 was removed in 2.1.6-8. Obviously, the vulnerability fixed by this Hotfix was only introduced in Zope 2.2.0.

Then, Hotfix_2000-10-11 wouldn't work with 2.1.6 out of the box, but since 2.1.6 was affected by the vulnerability nonetheless, I had to apply a fix to the Hotfix. Included in 2.1.6-8 as well.

This time, 2.1.6-8 has been tested on a potato system to a moderate degree.

Sparc missing.

Rejected packages

Packages that don't meet my requirements

alsaplayer-alsaupdates0.99.26-3i386, sparc
alsaplayer-esdupdates0.99.26-3i386, sparc
alsaplayer-ossupdates0.99.26-3i386, sparc
alsaplayerupdates0.99.26-3i386, sparc

Priority low, no critical or security fixes.

From the maintainer: I made these packages before I was told that build dependencies were not required. Feel free to reject, there were no other changes.

Maintainer: Ivo Timmermans <>

autologstable0.35-3alpha, arm, i386, m68k, powerpc, sparc

No reason given why it was uploaded for potato. ChangeLog says:

* Uploaded to stable.

Even worse, configuration defaults to spanish.

Maintainer: Nicolás Lichtmaier <>

barcodeupdates0.95.1-3m68k, powerpc
barcodeupdates0.95.1-4arm, sparc

No reason to make it into stable, changelog mentions unstable

Maintainer: Chris Rutter <>

cfengineupdates1.6.2-0.1m68k, powerpc, sparc

Alleged security update. BenC had already fixed it in 1.5.3-6. BSD sent out an advisory recently which confused our maintainer. (he read too much glibc code or something :)

Investigation: It looks like that upload fixes a problem which was already fixed in the stable version of »cfengine«. Thus there is no reason for including this package. Additionally Debian doesn't activate said »cfd« by default, it even won't run without manual interaction (conffile missing).

distributed-netupdates2.8012-potato3alpha, i386, powerpc, sparc

aj: It's actually non-free, not contrib. The maintainer says that we ought to be doing this in order to be allowed to distribute it at all; I'm inclined to allow that in. (In any event, it's non-free, so it doesn't much matter if it breaks things)

Joe Drew: It's come to my attention that this version of distributed-net has critical bugs, so I've gotten it removed from proposed-updates. I've had complaints that the version in stable is too old, but I think I'll just start pointing them to the unstable version, or make a "stable-ish" version in a private apt-repository. As it is, distributed-net cannot be released in 2.2r3.

Since the client in stable does not work anymore, it cannot be distributed at all, it should probably be removed from it.


No reason why this should go into stable. ChangeLog says:

* Moved /usr/doc/ to /usr/share/doc (Closes: #91430)

* Added Sections: and Priority: fields.


Misplaced upload that ought to be unstable only

* New "upstream" release, downloaded on 4 Jan 2000.

Maintainer: Anthony Wong <>

dvorak7minupdates1.4-5arm, i386, m68k, powerpc, sparc

Misplaced upload that ought to be unstable only.

Maintainer: Ivo Timmermans <>

freetype-toolsupdates1.4-0potato2arm, i386, powerpc, sparc
freetype2-devupdates1.4-0potato2arm, i386, powerpc, sparc
freetype2updates1.4-0potato2arm, i386, powerpc, sparc

Changelog says:

* New upstream release, the final version of the FreeType 1 series.

* Build for Debian 2.2 series (potato).

* The configure options for kpathsea support in ttf2pk has been changed upstream, and 1.4-0potato1 was inadvertently built without kpathsea support. Thanks to Philipp Lehman for the bug report! :-) Closes: Bug#83403.

* Oops, I didn't know that debhelper (>= 2.1.0) and libtools (>= 1.3.4-1) aren't in potato yet. Fixed Build-Depends line. Thanks to fellow Debian developer Dan Jacobowitz for letting me know.

Alpha and m68k missing freetype-tools freetype2-dev freetype2

Maintainer agrees with reject.

Maintainer: Anthony Fok <>

g2updates0.40-2i386, m68k, powerpc, sparc

Changelog says:

* New maintainer.

* Updated description - g2 site moved since last release.

* Added dependency on libgd-gif1. Closes: Bug#61124

Arm and alpha missing

Maintainer: Eric Cain <>

gccstable1:2.95.2-13alpha, i386, powerpc, sparc
gccstable1:2.95.2-13.1arm, m68k

Changelog says "NMU\nAdd new patch for ARM" though this is an upload for sparc and arm is already in stable.

I'm not quite convinced we should update a compiler in stable w/o proper need. Syncing versions would be good, but this would introduce an untested compiler package.

Philip Blundell wrote: From what I remember, the extra patch that was added in -13.1 is only applied when building for ARM. So the new SPARC version is benign but useless - it'll be exactly the same as -13. I'd be inclined to leave it out.

gpg-rsarefstable1.1-2i386, powerpc, sparc

This package is to be removed from stable. GnuPG itself has builtin support for the RSA algorithm. It got in via security update.

This is non-US.

hzttyupdates2.0-3potato4arm, i386, m68k, sparc

New package for stable

Changelog says:

* Compilation problem on Alpha architecture is now fixed! Special thanks to fellow Debian developer Paul Slootman who sent me the patch! Closes: Bug#55251.

* An hopeful upload for Debian 2.2r3; hztty didn't get into Debian 2.2 because of Bug#55251. Now that Paul has fixed this "Can't build from source" bug, I hope hztty could get into future Debian 2.2 releases if there is enough room on the CD-ROMs. :-)

Alpha and powerpc missing

Maintainer: Anthony Fok <>


Security update, changelog says:

* Non-maintainer release by security team

* Fix trivial buffer overflow in init() code

* Change Iconfig to not enable the asm stuff since the modern gcc doesn't accept it


1. There is no source

2. No other arch is mentioned

3. On Wed, 22 Nov 2000 22:06:53 +0100, an advisory was issued telling people that Debian is not vulnerable to the koules problem.

latex2rtfstable1.1-6arm, m68k, powerpc
latex2rtfstable1.8aa-2alpha, i386, sparc
latex2rtfupdates1.8aa-4alpha, arm, i386, sparc

Changelog does not convince me to push it into stable:

* Upload to stable to overcome the "can't build from source" bug that breaks autobuild on some architectures.

* Add build dependency on debhelper.

m68k and powerpc missing, if they are uploaded I shall accept the upload.

Maintainer: Chris Lawrence <>


Misplaced upload, it mentions "stable unstable" it's a new upstream version


Fixing some bugs, but playing with conflicts against libc which apparently is dangerous. ChangeLog says:

4-5: * Added Conflicts to libc (<<2.1.94). (Closes: #72552, #74567)

4-6: * Modified Conflicts to libc (>>2.1.94) again. Because it can cause removing packages depending on libc.

Reading the bugreport, having it talk about woody, I'm entirely not convinced this package should go into stable.

Maintainer: Chu-yeon Park <>


Stable has newer versions already and all arch's are in sync.



1st - The version in stable is unusable since the non-free package dissappeared from the real site.

2nd - The version in proposed-updates is fucked up and must not be installed in stable.

Brian Russo <> has uploaded a new version to unstable to see if it works. If it does he uploads a new version for stable. He can do that at any time.

Joey says: One comment, on realplayer -- the version of the installer in stable does not currently work, since Real has released a new version of realplayer and the old version is no longer available[1]. So the package should either be removed from stable or updated.


No reason why this package should go into stable. ChangeLog says:

* Rebuilt package. Closes #91065, #91654

trueprintupdates5.1-8i386, powerpc, sparc

I'm not convinced this package should go into stable, sorry Blinder, but we already discussed this... Small chance: aj has the final say. Changelog says:

* fixed a typo in the config file which causes the program to segfault when useing the -P option, with which one can specify where to print the output; Closes: #73042; * removed wrong control information: - Build-Depends: lpr | lprng - Suggests: diff * Updated Maintainer field to my official Debian address

alpha, arm and m68k missing

Maintainer: Othmar Pasteka <>


Wth should this package go into stable? The changelog scares me:

* Non-maintainer upload for potato, sponsored by Anthony Fok.

* New upstream version. Closes: #59945.

* Fix package build problems in debian/rules. Closes: #67866, #67867.

* Fix 'NoChange' with an Xsession wrapper. Closes: #59621, #61244.

* Call update_wdm_wmlist in init file. Closes: #34680.

* Insists on PAM fail delay even if getpwnam fails. Closes: #67166.

* Disable running xconsole by default. Closes: #56918.

* New non-squashed logo from Daniel Patterson. Closes: #48696.

* Added Build-Depends in debian/control.

alpha, i386, m68k, powerpc and sparc missing

Maintainer: Daniel Patterson <>

xcingbstable2.3.02-3.1alpha, i386, m68k, powerpc, sparc
xcingbupdates2.3.02-3.2arm, m68k

Misplaced upload? It mentions 'stable unstable', it's an NMU as well and doesn't fix any bugs listed in the BTS.


Dunno why this should go into stable.

* Non-maintainer release to fix previous upload.

* Another hack in debian/rules to force the .elc files I had to remove to be rebuilt (Closes: #86990). This should really be done in a Better Way, but this package does not seem to provide support for compiling elc files.

* Removed psgml-other.* from MANIFEST.psgml.

Yann writes: psgml completely unusable as an integrated part of the SGML environment which was announced loudly some times ago; - fix impacts psgml module only, so no impact on working modules

Maintainer: Yann Dirson <>


Dunno why this should go into stable, changelog says:

* Added Won-Kyu Park's hintings of gulim10b?, batang10b?, gulim12b? from <>

Maintainer: Changwoo Ryu <>

xtelupdates3.2.1-4potato1arm, i386, m68k, powerpc, sparc

Security update, no advisory released yet

Version is not secure yet. Buggy upload.

Alpha and m68k missing

libhz-devupdates0.3.9-1potato1.1arm, m68k, powerpc
libhz-devupdates0.3.9-1potato1.2i386, sparc
libhz0updates0.3.9-1potato1.1arm, m68k, powerpc
libhz0updates0.3.9-1potato1.2i386, sparc
zh-autoconvertstable0.3.4-1alpha, arm, i386, m68k, powerpc, sparc
zh-autoconvertupdates0.3.9-1potato1.1arm, m68k, powerpc
zh-autoconvertupdates0.3.9-1potato1.2i386, sparc

Not convinced this should go into stable.

* New upstream version which fixes a whole bunch of important bugs.

* Based on 0.3.9-2 in unstable, built for potato.

* NMU requested by maintainer/upstream author Yu Guanghui.

* Applied a few other minor fixes which YGH hasn't put in. ;-)

alpha and sparc missing

out of sync

Maintainer: Anthony Fok <>

zshstable3.1.9.dev6-7arm, i386, m68k, powerpc, sparc
zshupdates3.1.9.dev8-6i386, powerpc

Three versions uploaded to stable, first to 'stable unstable', doesn't show careful destination to stable, I'm sorry. Upload fixes only two normal bugs.

alpha, arm, m68k, sparc missing

Maintainer: Clint Adams <>


This list intends to help Anthony Towns releasing 2.2r3. He has the final power to accept a package or not. If you want to comment on this list, please send a mail to Martin Schulze <>.
Last updated 2001/04/16 17:56