The first security and critical bug-fix update to Debian GNU/Linux 3.1 “sarge” has been released: “This is the first update of Debian GNU/Linux 3.1 (codename ‘sarge’) which mainly adds security updates to the stable release, along with some corrections to serious problems.”
Debian GNU/Linux 3.1 Updated (r1)
About The Author
Eugenia Loli
Ex-programmer, ex-editor in chief at OSNews.com, now a visual artist/filmmaker.
Follow me on Twitter @EugeniaLoli
Happy to see Debian releasing updates and moving more and more packages to testing
Use backports.org http://backports.org/ to get Xorg, Firefox 1.5 and other new stuff for Sarge.
Sarge is a great release. I hope the future continues at this rate. I also hope that more of the patches from Ubuntu are accepted back into Debian proper so that both projects help eachother.
I am NOT trying to start and Ubuntu vs Debian flamewar. Don’t take it as that.
I also hope that more of the patches from Ubuntu are accepted back into Debian proper so that both projects help each other. I am NOT trying to start and Ubuntu vs Debian flamewar. Don’t take it as that.
But it seems to me that you are, maybe unintentionally. How is that different from “Debian should accept all Ubuntu craps!” attitude?
See also
http://kitenet.net/~joey/blog/entry/a_bad_taste_in_the_mouth_detail…
(I’m not claiming that Joey’s case is in any way representative. However, “I hope more Ubuntu patches to be accepted back into Debian” is misleading. I hope more *good* Ubuntu patches to be accepted, and AFAICT, they are.)
Good. I was referring to the “good” ubuntu patches. It’s also great that there was no duplication of effort as the Ubuntu x.org packages were accepted into Debian. I REALLY hate to see duplication when brilliant minds can work together for the betterment of the whole.
It’s also great that there was no duplication of effort as the Ubuntu x.org packages were accepted into Debian.
Xorg is a great example of collaboration indeed!
Don’t worry about it. I would simply ignore posts like his. No matter what your intentions, there will be people offended no matter the explaining. People like this live for conflict where their alter ego take control behind a keyboard.<<sigh>>
I was going to toot my horn on the merits of Debian’s advances but I think I’m at the wrong site. Could someone please clarify if this is the Vonage website or the osnews site.
Go debian!
I know this is probably not the place to bring this up but in light of the comment above I thought I might as well.
Personally I appreciate OSNews quite a bit and I will try to click on links whenever possible to help keep the site running. I am sure that there are many others like me. The new ad placement smack bang in the middle of the content is quite frankly far too intrusive into my browsing experience, it is not appreciated and I will not click on something like that no matter how relevant it is out of spite.
just the perspective of a humble OSNews reader
Move along.. nothing to see.
Due to the admirable efforts of the security team, I had already apt-get upgrade’d all of the packages anyhoo 🙂
As often as I’m frustrated by software and it’s seemingly unending supply of bugs, design flaws, and unneccessary complexity, I’m just as often impressed by the work of the Debian developers and packagers. Everything “just works” in the way I want it to.
There is an official security update, tried and tested, for a broadly deployed distro, and moreover, a base distro for other distro’s. And as stated in the release notes it’s not a feature release or compilation of fun new diversions. This is a security release for Debian “Sarge”, a reputable and “stable” GNU/Linux base. For those who run or admin debian distros this is assuring, solid news. Let’s leave the distro comparisons aside and acknowledge this conservative and responsible release as such.
not enough people clicking on your lame ass stories? need to force the advertising on us because you can’t support the site?
lame!!
Clicking on “lame ass stories” doesn’t pay the bills. So, what do you propose to support the site? If you don’t want ads, then buy the subscription or whatever that gives you a faster loading site without ads (if I recall correctly).
Leach.
Adblock is great
I was a debian/sid user.
I’m happy about debian progress.
One question though.
How can be firefox in stable be at 1.0.4 and not at 1.0.6 or 1.0.7 ?
I understand 1.5 is “too new” but 1.0.4 seems a bit outdated.
Am I missing something ?
No new features, minor bug fixes or regressions are added to a stable release. Only security fixes receive patches.
e.g.
mozilla-firefox_1.0.4-2sarge5
Firefox 1.0.4 was the latest version to be accepted into stable before it’s release. For each security patch, the version will be appended with “sarge<n+1>”.
In fact, it’s almost certainly Firefox 1.0.7 that you’re actually using, given the volume of bugfixes, and that the patch for DSA-779-2 was, according to its author, “basically version 1.0.6 with the version number rolled back, and hence still named 1.0.4-*”. The full list of Firefox fixes are:
http://www.debian.org/security/2005/dsa-775
http://www.debian.org/security/2005/dsa-779
http://www.debian.org/security/2005/dsa-837
http://www.debian.org/security/2005/dsa-838
It’s a whole lot more up to date than it looks. This is the benefit of having trained programmers take over package management.
Yeah, this happened in ubuntu Horay. fx 1.0.7 was released as a security update for 1.0.6 included in horay, but they kept the version number the same, to avoide dependency issues. It was 1.0.7, but it was names something like firefox-1.0.6-ubuntu-2
This sort of thing has to happen to save the security teams having to repackage apps just so they don’t break with new version numbers. I’d rather they were working on security issues than repackaging other apps so they don’t break.
when did osnews become an ad-whore…those things are huge and really annoying.
I agree. That’s very unattractive. Not sure I’d worded it quite that way, but yeah, they’re intrusive.
I use Flashblock. It’s funny, some sites have almost no content with flashblock on! For those who don’t know, Flashblock replaces the flash applet with a white box with a “Play” button. If you want to see the applet, just click the play button. I love extensions!
Debian – unlike Monica Lewinsky, it never goes down!
Why are these people harping about the ads? Is this not a tech news site? Are we not geeks? Can we not find technology to alter our browsing for our needs, like say, Privoxy?
I use debian testing. But the softwares like firefox and all is quite old (1.09 something). Is it possible to easily upgrade the softwares to the latest versions using apt-get ?
Above a comment stated backports. What are these ?
Thanks
You should read about apt-pinning. It makes it possible to cherry-pick packages from unstable while leaving the rest of the packages alone. Unfortunately if the version of glibc differs between testing and unstable this doesn’t work. Every package you pick will pull in half of unstable.
Backports are up-to-date packages build with the tools and libraries from the stable distribution. This isn’t always possible or trivial when the up-to-date software relies on new features in a library.
Backports are for Debian stable (sarge). I use Debian testing (etch) but I’ve installed some apps from Debian unstable (sid). You can wait a bit for Firefox 1.5 to appear in testing or you can install Firefox 1.5 from unstable. Mixing many packages between different “branches” is not generally recommended. Debian testing gets all the time new packages after they’ve been tested in unstable.
Debian stable only gets security fixes, not newer versions of programs. But there’s a package repository in backports.org that has newer versions of programs for Debian stable packaged by official Debian developers. Then there are plenty of unofficial package repos that you can search in apt-get.org but these are not officially supported. Also http://mentors.debian.net/ and http://debian-unofficial.org might be worth checking out.
Which packages are available via apt-get (or aptitude or synaptic) can be configured by editing /etc/apt/sources.list.