<!DOCTYPE kc SYSTEM "kt.dtd">

<kc version="0.1.0">

<title>Ubuntu Traffic</title>

<author contact="mailto:mako@canonical.com">Benjamin Mako Hill</author>

<issue num="24" date="2005/02/04" />

<intro>

<p>Welcome to the twenty-fourth edition of Ubuntu Traffic. This issue
covers the following week: <em>January 29 - February 4,
2005</em>. Ubuntu Traffic summarizes the most important mailing list
and IRC discussions involving the Ubuntu GNU/Linux distribution.</p>

<p>Ubuntu Traffic can be found on the web at <a
href="http://people.ubuntulinux.org/~mako/ubuntu-traffic/">http://people.ubuntulinux.org/~mako/ubuntu-traffic/</a>. You
can also receive in text form over email by signing up for the Ubuntu
News mailing list at <a
href="http://lists.ubuntu.com/mailman/listinfo/ubuntu-news">http://lists.ubuntu.com/mailman/listinfo/ubuntu-news</a>. There
is now an RSS feed for traffic available as well! You can find
information on turning that on at the <a
href="http://people.ubuntulinux.org/~mako/ubuntu-traffic/">Ubuntu
Homepage</a>.</p>

<p>You can sign up for any of the mailing lists summarized here at <a
href="http://lists.ubuntu.com">http://lists.ubuntu.com</a>. You can
also join the IRC discussion summarized here in #ubuntu and other
channels on the Freenode network: irc.freenode.net. Please join in and
maybe you will be featured in the next traffic!</p>

<p>First, the following bits and pieces didn't get a full story but
are worth mentioning:</p>

<ul>

<li>Matt Zimmerman responded to a question by John Richard Moser and
pointed folks to a great document on customizing the Live CD
(something that came up a number of different places this week): <a
href="http://www.ubuntulinux.org/wiki/LiveCDCustomizationHowTo">http://www.ubuntulinux.org/wiki/LiveCDCustomizationHowTo</a></li>

<li>Fabio Massimo Di Nitto announced the first meeting for the new
kernel kernel team. The meeting will be at 8th February 15:00 UTC on
#ubuntu-meeting and will talk about a temporary team leader,
procedures, subsystem leaders, a TODO list and any other business.</li>

</ul>

</intro>

<section
  title="Language Packs and Locales"
  subject="Language packs vs. locales"
  posts="17"
  startdate="2005/01/21"
  enddate="2005/01/30"
>

<p>Matt Zimmerman tried to put his finger on the now disconnected
relationship between language packs and system locale generation
asking, <quote who="Matt Zimmerman">Would it be possible to have the
language packs also ensure that the appropriate locale is generated
when they are installed?</quote></p>

<p>There was some confusion in the discussion as it was unclear to
people that Matt meant <em>generation</em> of the locales and not both
the generation and setting the default. Martin Pitt clarified his
position on this saying, <quote who="Martin Pitt">The langpacks should
<em>generate</em> the respective locales.  However, above discussion
was about setting the <em>default</em> locale, which the language
packs should not do on installation.</quote></p>

<p>However, not everyone thought that this was a horrible idea. People
advocating a connection between default locales and language pack
installation admitted that it would need to be asked and suggested
that a one-time Debconf questions might make sense for those people
upgrading who might want to install the language pack. Matt Zimmerman
explained the situation saying:</p>

<quote who="Matt Zimmerman">

<p>Michael Vogt has implemented a system for asking this type of question in a
nice way, see InteractiveUpgradeHooks in the wiki.</p>

<p>There will already be such a hook for the UTF-8 transition, which will
include changing the system default locale (UTFEightMigrationTool).</p>

<p>In other words, I think everything is in order, and language packs do
not need to worry about which locale is chosen by the user.  It
should be simple and sensible, though, for them to cause the
appropriate locales to be generated when they are installed, so that
the user can select them if desired.</p>

</quote>

<p>Later on, Martin Pitt followed up to the thread to say, <quote
who="Martin Pitt">Just for the record, the current set of
language-pack-* packages [generate locales] now.</quote></p>

<p>Thanks Martin!</p>

</section>

<section
  title="Alternate Live CD Kernels"
  subject="Live CD kernels"
  posts="14"
  startdate="2005/01/30"
  enddate="2005/01/31"
>

<p>John Richard Moser asked the devel list about getting Live CDs with
experimental or alternative kernels: <quote who="John Richard
Moser">Can we see Hoary live CDs with experimental kernels on them?
Normal users will just boot, but a submenu to grub to supply
experimental kernels would allow a longer release test cycle for
kernels even though they won't be supported until at least Hoary+1.
This would be good for QA.</quote> Matt Zimmerman replied saying:</p>

<quote who="Matt Zimmerman">

<p>Sure, this is pretty simple to do.</p>

<p>Assuming that the kernels are binary-compatible, just copy vmlinuz into
/install.  If you need additional modules, you can add them to the initrd.</p>

<p>If the kernels are not binary-compatible, you'll also need to replace
the module udebs on the CD with new ones, and regenerate the Packages
and Release files, but it's still fairly straightforward.</p>

</quote>

</section>

<section
  title="Ubuntu-Devel and Split Mailing Lists"
  subject="CHRP support / Mailing lists"
  posts="5"
  startdate="2005/01/27"
  enddate="2005/02/03"
>

<p>Thibaut Varene sent a message to the ubuntu-devel explaining that
he thought that the mailing list was badly in need of being split:</p>

<quote who="Thibaut Varene">

<p>Again, I think we need more mailing-lists. Ubuntu-devel has become
the default target for almost any kind of mails, hopefully dealing
with &quot;something related to Ubuntu&quot; (ranging from
user-support, to real development issues), which ends up in a
&quot;topic mess&quot;. I tend to wonder &quot;WTH is this mailing
list about?&quot; :P</p>

<p>I've suggested to Mako that we need a u-private mailing-list (or
call it u-maintainers), a la debian-private, that is to say a low
traffic mailing list that every Ubuntu Maintainer (and only them) has
to be subscribed to.</p>

<p>A u-project m-l would certainly be helpful too, to discuss openings
and new projects in Ubuntu, such as this mail requesting more
mailing-lists, which I am sending reluctantly to u-devel, even more
given the fact I'm no longer subscribed: I suspect that it'll be
moderated :P</p>

</quote>

<p>Thibaut also suggested port and team specific lists for many
development related tasks. Matt Zimmerman replied saying, <quote
who="Matt Zimmerman">This mailing list only receives about 30
messages/day; I see no purpose in isolating discussions on separate
mailing lists at this point.</quote></p>


<p>In the same thread, Jerry Halton asked: <quote who="Jerry
Halton">Curiously, are there hidden lists? Or does everybody get
everything done on IRC? Or the Wiki? It seems odd that such a kick ass
distribution materialized with only 30 messages a day of
discussion.</quote></p>

<p>In answer to his questions, are there are no hidden lists that sees
discussion of Ubuntu development although Canonical has an
administrative list for it's employees. Colin Watson gave more
information:</p>

<quote who="Colin Watson">

<p>In practice a lot gets done on IRC; the latency is so much lower that
it's worthwhile. A good deal has been done face-to-face at conferences,
too.</p>

<p>In the early days, before we went public, development took place on
the main Canonical internal mailing list (which now sees very few
mails, and none about Ubuntu development), but the level of mailing
list traffic was a good deal lower then than it is now. You can get a
lot done if you give people tasks they're interested in and the
freedom to get on with them largely unobstructed.</p>

</quote>

</section>

<section
  title="Autopackage"
  subject="Autopackage for Ubuntu!"
  posts="17"
  startdate="2005/01/30"
  enddate="2005/02/02"
>

<p>Martin Alderson started a thread on using autopackage for
Ubuntu. Autopackage is a multi-distribution binary packaging framework
for GNU/Linux systems:</p>

<quote who="Martin Alderson">

<p>Any plans to use autopackage (autopackage.org) which would solve
most, if not all, Linux install problems (distro-neutral packages,
automatic dependency resolution with no central dependency database,
IIRC, beautiful GUI for both GTK and QT, etc etc).</p>

<p>I don't want to argue on apt-get. It's a nice solution... for
now.</p>

<p>I'll just cover some brief points why apt-get ain't no good for
'big market share use':</p>

<ol>

<li>There will be too much software for a central repo to handle and
test it. You'd need a petabyte just to store games from the last few
years, on Windows at least.</li>

<li>Software makers could have their own repos, but that has more
problems - the fact you have loads of conflicting repos in your
sources.list and you are distro-specific.</li>

</ol>

<p>So basically, for commercial (or even 'easy' non-commercial)
software installation, apt-get is a
'sorta-works-but-will-break-in-the-future' solution. If you say that
'we' don't need commercial software, you are kidding yourself. Games
for example could never be IMO non-commercial, unless we all paid a
$35/mo subscription fee to play them but the original game is free. Or
something. Just think that in a game it's probably 10%
useful-to-other-projects code and 90% artwork, modeling, sounds which
is going to be almost always 'game specific'</p>

<p>Anyway, any chance we could have autopackage soon? They are API
stable now and they have some great packages for very hard to install
stuff.</p>

</quote>

<p>Konstantin Ryabitsev pointed Martin to the Autopackage FAQ at
<a href="http://autopackage.org/faq.html">http://autopackage.org/faq.html</a>:</p>

<quote who="Konstantin Ryabitsev">

<p>Q: Can I use autopackage for my new distro?</p>

<p>A: No, see the question below for more details, but essentially
autopackage is not a tool for building distributions. It's a tool for
3rd party software developers to produce packages for their website
that any Linux user can use.</p>

</quote>

<p>Mike Hearn, the autopackage maintainer and an active Ubuntu mailing
list participant of late, posted a follow up that clarified things
quite a bit:</p>

<quote who="Mike Hearn">

<p>I'm the autopackage maintainer. Just in case things get out of
hand, let's clear up a few points:</p>

<ul>

<li>autopackage will not solve all Linux software install
problems. Sorry.  Popular misconception, even though we try hard to
avoid people getting that impression on the website. It is only one
component of a much larger set of work needed for that.</li>

<li>Right now we don't have a 1.0 release, I think it'd make sense to wait
until we do before trying to get the base release into any distributions.</li>

<li>autopackage isn't just for proprietary software, in fact right now it's
being used primarily by GTK+ based open source projects like GAIM and
Inkscape.</li>

<li>Yes, it does make sense to have the runtime in distributions by
default, because otherwise when you first use a .package file you
have to jump through hoops to switch on the +x bit, wait while the
runtime is downloaded and so on. Having it all in the base distro
avoids that (until we release a new version that packages start relying
on that is ...)</li>

</ul>

<p>There is a more comprehensive discussion of the pros/cons of
centralised packaging here: <a
href="http://autopackage.org/NOTES">http://autopackage.org/NOTES</a></p>

<p>We don't see it as a replacement for apt, rather it's complementary
to it.  Apt works great for managing the core of a distribution. It
works rather less well when you try and scale it up to
&quot;everything you might ever want&quot;. It's been attempted many
times before, with Debian, Gentoo and Fedora most notably, and it's
inevitably ended up in a quagmire.</p>

<p>In my most humble opinion, the Ubuntu project would be better off
concentrating resources and manpower on building a great operating
system rather than a big collection of packages.</p>

</quote>

</section>

<section
  title="Framebuffer Activation"
  subject="Framebuffer activation"
  posts=""
  startdate="2005/01/31"
  enddate="2005/02/92"
>

<p>Matt Zimmerman posted a message to the devel list and to a number
or developers involved with kernels and the framebuffer about activating
the kernel framebuffer by default:</p>

<quote who="Matt Zimmerman">

<p>As a basis for USplash, we will need to start enabling the kernel
framebuffer in the initrd, if (and only if) the 'splash' option is
passed on the kernel command line (it is by default).</p>
<p>In the long term, this should probably be done by an initrd hook in the

usplash package, but in order to weed out any hardware difficulties early,
we should start doing this now, even before USplash proper has entered
Hoary.</p>

<p>The installer has been activating the framebuffer by default for some
time now, so we should use its approach as a starting point (see
rootskel).  There are machines where this is known to fail (some
laptops especially), and we'll need to do something about those.  In
order for Ubuntu to be installed on such systems currently, the user
must pass debian-installer/framebuffer=false, so we should have a way
for that setting to propagate to the installed system (specifically,
omitting the 'splash' parameter).</p>

</quote>

<p>Paul Sladen responded to Matt saying:</p>

<quote who="Paul Sladen">

<p>I'm happy for 'splash=' to stay on the default kernel command-line
(it's not on the recovery line); usplash will do something pretty and
equivalent and as best it can in text-mode.</p>

<p>[x86/amd64] The VESA video mode can only be set by passing 'video='
and/or 'vga='.  This should also only be on the default kernel
commandline [and not '(recovery)'].  These just need to be dropped if
'debian-installer/framebuffer=false' was used at install time.</p>

<p>IIRC, the mode is set by the 16-bit pre-main code in the kernel; the
FB can then be /accessed/ by loading 'vesafb'.  I'm not sure what is
hooking '/framebuffer=false' and where.</p>

<p>The even bigger challenge is appending those 'vga=' parameters in the
first place.</p>

</quote>

</section>

<section
  title="New Keyboard Selection Program"
  subject="New keyboard selection code"
  posts="2"
  startdate="2005/02/03"
  enddate="2005/02/03"
>

<p>Matthias Urlichs did some great work to help create a program to
help people automatically select a keyboard layout. He announced the
initial product of his work on ubuntu-devel saying:</p>

<quote who="Matthias Urlichs">

<p><a
href="ftp://netz.smurf.noris.de">ftp://netz.smurf.noris.de</a>/{initrd.gz,vmlinuz}
has my new keyboard selection code. Please test / try to break -- I'd
like to get some confidence that this is actually working for &gt;1
person before I upload the stuff to Hoary.</p>

<p>What the code does: Instead of displaying a list of languages, I
ask the user to press a few specific keys. By evaluating the keycodes,
I can determine which variety of $STRANGE_KEYBOARD you have.</p>

<p>(NB: I <em>know</em> the new parts don't have translations
yet. That's next.)</p>
</quote>

<p>He followed up in a separate message to explain that there were a
few known bugs:</p>

<quote who="Matthias Urlichs">

<ul>

<li>Console switching is broken. This will get fixed tomorrow.</li>

<li>The mapping table may have bugs. In that case, either the normal
selector pops up automatically, or you get a &quot;Keycode 12 was not
expected&quot; message. If you run into this, please tell me which keys
you pressed to get there, and their keycodes (you can get these
with &quot;showkey&quot;).</li>

</ul>

</quote>

</section>

<section
  title="Ubuntu Reviews and Press"
  subject="LinuxPlanet reviews Ubuntu"
  posts="7"
  startdate="2005/02/03"
  enddate="2005/02/04"
>

<p>Jeff Waugh posted to the sounder list pointing people to a great
review of Ubuntu over on LinuxPlanet. The choice quotes included:</p>

<quote who="Jeff Waugh">

<p>&quot;The goal of the Ubuntu folks is to provide a more up-to-date
Debian than Debian, while eliminating many of the potentially
confusing installation options and permutations encountered when
installing many Linux distributions. They accomplish these goals
extremely well, with an easy-to-use installation process, a great
system update and enhancement mechanism, and a distribution that makes
a great starter--or permanent home--for Linux users who'd just like to
use their computer to get work done.&quot;</p>

<p>&quot;Commercial support for Ubuntu is available directly from
Canonical, LTD (<a
href="http://www.canonical.com/">http://www.canonical.com/</a>), which
is the company that sponsors the Ubuntu project. Canonical's support
offerings are listed on the Ubuntu site at <a
href="http://www.ubuntulinux.org/support/paidsupport/">http://www.ubuntulinux.org/support/paidsupport/</a>. A
substantial number of firms all over the world that provide support
for Ubuntu are also listed in the Ubuntu Marketplace site at <a
href="http://www.ubuntulinux.org/support/marketplace">http://www.ubuntulinux.org/support/marketplace</a>. The
latter is an incredible testimonial to the wide-spread and
well-established nature of Ubuntu after a relatively short time in
Linux years.&quot;</p>

</quote>

<p>You can read the whole thing for yourself here: <a
href="http://www.linuxplanet.com/linuxplanet/reviews/5729/5/">http://www.linuxplanet.com/linuxplanet/reviews/5729/5/</a></p>

<p>Jad Madi pointed folks to a few more morsels of press at OSNews
here:</p>

<ul>

<li>Ubuntu Linux 4.10 Preview: <a href="http://www.osnews.com/story.php?news_id=8407">http://www.osnews.com/story.php?news_id=8407</a></li>

<li>Fedora Core 3 Vs Ubuntu Warty Warhog: <a href="http://www.osnews.com/story.php?news_id=8964">http://www.osnews.com/story.php?news_id=8964</a></li>

</ul>

<p>Jeff Waugh made a suggestion for people that want to read press
about Ubuntu and that want to report press on Ubuntu that they've
found:</p>

<quote who="Jeff Waugh">

<p>If you see an article about Ubuntu in the community, trade or
popular press, please let the Sounder know &lt;<a
href="mailto:sounder&#64;lists.ubuntu.com">sounder&#64;lists.ubuntu.com</a>&gt;. Many
of these will be put up on our &quot;In The Press&quot; webpage, which
is receiving more love as of this year. ;-)</p>

<p><a href="http://www.ubuntu.com/ubuntu/press/">http://www.ubuntu.com/ubuntu/press/</a></p>

</quote>

</section>

<section
  title="Reply-to-List on Ubuntu Users"
  subject="Ubuntu-Users and Reply-to-List"
  posts="10"
  startdate="2005/02/01"
  enddate="2005/02/04"
>

<p>Benjamin Mako Hill announced the decision in regards to
reply-to-list and the ubuntu-users mailing list that was summarized in
the CC meeting mentioned in last week's traffic:</p>

<quote who="Benjamin Mako Hill">

<p>For those of you that read the <a
href="http://lists.ubuntu.com/mailman/listinfo/ubuntu-news">ubuntu-news
list</a>, you may have seen that due to a request, the Ubuntu
Community Council discussed the status of the reply-to header at the
<a
href="http://people.ubuntulinux.org/~mako/cc-summary-20050125.html">meeting
last week</a>.</p>

<p>The issue at stake is more complex than many people, on both sides
of the issue, have argued. Clearly, the lack of a reply-to-list
function in at least one the major email clients that Ubuntu ships
(Thunderbird) makes the lack of a reply-to a headache for many
users. That said, setting a reply-to will break existing reply-to
headers for some users of the list. For these and many other reasons,
people feel very strongly <em>both</em> ways.</p>

<p>Additionally, the council expressed some hesitation at moving
forward with any change specifically because the tone of recent
discussion on the topic on this list has degenerated into
disrespectful attacks and an unhelpful &quot;us versus them&quot;
attitude. We're looking to a policy of enforcing the <a
href="http://www.ubuntulinux.org/community/conduct">code of
conduct</a> more rigorously in the future.</p>

<p>With all that said, I'm happy to announce that the council has
listened to arguments made by many who were respectful and
constructive in their complaints and is going to switch the
ubuntu-users mailing list (and only that list) to
&quot;reply-to-list&quot; for a <em>trial</em> period. The topic will
be discussed again at the next community council meeting.</p>

<p>Additionally, Canonical is looking into bountying reply-to-list
functionality for Thunderbird in Ubuntu.</p>

<p>If you have strong feelings about the change, either way, please
read up on the background of the decision and feel free to reply to
this list or to email &lt;<a
href="mailto:ubuntu-users-owner&#64;lists.ubuntu.com">ubuntu-users-owner&#64;lists.ubuntu.com</a>&gt;.</p>

<p>On the lighter, but no less important side of the issue, you might
want to be careful when you hit reply from now on. The messages will
be public by default. ;)</p>

</quote>

<p>Some people on the list followed up to say that they thought that
the pursuing the long-term solution with expanding the functionality
of Thunderbird and others was the best idea. Ben Novack pointed out
that this would solve things for everyone saying, <quote who="Ben
Novack">I'm especially grateful as I use gmail's interface, so any
feature-adds to Thunderbird won't help me at all.</quote></p>

</section>

<section
  title="Imminent Feature Freeze"
  subject="5 days(!) until feature freeze for Ubuntu 5.04/Hoary"
  posts="1"
  startdate="2005/02/04"
  enddate="2005/02/04"
>

<p>Matt Zimmerman announced the imminent &quot;feature freeze&quot; of
hoary hedgehog in a message sent to the Ubuntu development list:</p>

<quote who="Matt Zimmerman">

<p>Feature freeze is coming up very soon, and so this is a good time to take
stock of what we've done, and how far we have to go.</p>

<p>First, if you're working on Hoary features, please go to <a
href="http://www.ubuntu.com/wiki/HoaryGoals">http://www.ubuntu.com/wiki/HoaryGoals</a>
and update the status column for your project(s).  There is a lot of
work in progress, and we need to know where we stand overall.  It's
clear that we've achieved a great deal already, but many features are
in need of status updates.</p>

<p>By feature freeze, goals which involve development work on packages
in 'main' should meet the following criteria:</p>

<ul>

<li>Primary and Secondary goals should have initial code in Hoary, and ongoing
development should be taking place in Hoary</li>

<li>Targets of Opportunity should have essentially feature-complete code in
Hoary, with only bug fixing and fine-tuning remaining</li>

</ul>

<p>If you are working on one of these projects and are not uploading your
development code to Hoary yet, then the project is at risk of falling behind
schedule and being excluded from the release.  Features which are not on
this list will not be included in the release without a justifiable
exception to the release process.  New code needs to receive widespread
testing as soon as possible so that it has time to stabilize for the final
release.</p>

<p>So, if your work does not meet the conditions above, please follow up to
this message with details of your situation (blocking items, outlook for the
project, help needed, etc.) so that we can discuss how to proceed.</p>

</quote>

</section>

<section
  title="Ubuntu Documentation Team Happenings"
  subject="Automated Status Reports"
  posts="85"
  startdate="2005/01/20"
  enddate="2005/02/04"
>

<p>Sean Wheller, one of the most active people on the documentation
team was frustrated with several aspects of the way of the
documentation team was working and with the way that Canonical seemed
to be treating documentation writing. He said:</p>

<quote who="Sean Wheller">

<p>To whoever may care at Canonical, I seriously wonder if you are
serious about having Ubuntu Documentation or not.</p>

<p>In the short time I have been with the project we have managed to
achieve much on our own, but there are things on which we do need your
support. All I can say is that getting that support has been slow to
non-existent.</p>

</quote>

<p>Many of his issues were connected to the need to get Subversion up and
running for the documentation team to start using. Matt Zimmerman
replied saying:</p>

<quote who="Matt Zimmerman">

<p>Understand that this is a very rapidly growing operation, with many
projects involved and expanding as well.  There are bound to be
growing pains.  The best that we can expect is that problems are
addressed as they come up, and not before.</p>

<p>Again, I am available as a point of contact on Canonical-related
issues.  I can't promise to monitor every message on ubuntu-doc, but
if you address me personally, I will generally respond.</p>

</quote>

<p>Elsewhere, Sean and Enrico Zini also talked a bit about refining the
scope of the Quickguide.</p>

<p>In other great news, Enrico announced that there were finally Bugzilla
products and packages created! Those include a new <cite>Documentation</cite>
product and the final packages:</p>

<ul>
<li>&quot;Installation Guide&quot;</li>
<li>&quot;User Guide&quot;</li>
<li>&quot;FAQ Guide&quot;</li>
<li>&quot;Quick Guide&quot;</li>
<li>&quot;Admin Guide&quot;</li>
<li>&quot;About page&quot;</li>
<li>&quot;Release notes&quot;</li>
</ul>

<p>Matt Zimmerman also added the &quot;Ubuntu 5.04&quot; milestone so
that the group can mark bugs which must be fixed before the
release.</p>

<p>The group made great progress on the quick guide. On February 1st,
Sean Wheller announced, <quote who="Sean Wheller">This morning I
finished my screen capture tour of Hoary.  Thanks to Enrico for the
commit on Dictionary :-) Count down to Hoary has begun. At this point
I really feel that the Quick guide is do able for the freeze
date.</quote></p>

</section>

<section
  title="Ubuntu Security Notifications"
  subject="[USN-71-1] PostgreSQL vulnerability"
  posts="6"
  startdate="2005/02/01"
  enddate="2005/02/04"
>

<p>Martin Pitt posted another weeks worth of Ubuntu Security Notification
to the list notifying folks of another rash of bugs and pointing to
their fixes. These included the following:</p>

<h3>postgresql vulnerability</h3>
<p>Ubuntu Security Notice USN-71-1 (<a href="http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php">http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php</a>)</p>
<p><strong>Affected Release:</strong> Ubuntu 4.10 (Warty Warthog)</p>
<p><strong>Affected Packages Are:</strong> postgresql</p>
<p><strong>Fix:</strong> The problem can be corrected by upgrading the affected
package to version 7.4.5-3ubuntu0.2.  In general, a standard system
upgrade is sufficient to effect the necessary changes.</p>
<p><strong>More Information:</strong> <a href="http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000073.html">http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000073.html</a></p>


<h3>perl vulnerabilities</h3>
<p>Ubuntu Security Notice USN-72-1 (CAN-2005-0155, CAN-2005-0156)</p>
<p><strong>Affected Release:</strong> Ubuntu 4.10 (Warty Warthog)</p>
<p><strong>Affected Packages Are:</strong> perl</p>
<p><strong>Fix:</strong> The problem can be corrected by upgrading the affected
package to version 5.8.4-2ubuntu0.3. In general, a standard system
upgrade is sufficient to effect the necessary changes.</p>
<p><strong>More Information:</strong> <a href="http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000074.html">http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000074.html</a></p>


<h3>python2.2, python2.3 vulnerability</h3>
<p>Ubuntu Security Notice USN-73-1 (CAN-2005-0089)</p>
<p><strong>Affected Release:</strong> Ubuntu 4.10 (Warty Warthog)</p>
<p><strong>Affected Packages Are:</strong></p>
<ul>
<li>python2.2</li>
<li>python2.3</li>
</ul>
<p><strong>Fix:</strong> The problem can be corrected by upgrading the affected
package to version 2.2.3-10ubuntu0.1 (python2.2) and 2.3.4-2ubuntu0.1
(python2.3). After a standard system upgrade you must restart all
running Python server applications that use XML-RPC to effect the
necessary changes.</p>
<p><strong>More Information:</strong> <a href="http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000075.html">http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000075.html</a></p>


<h3>postfix vulnerability</h3>
<p>Ubuntu Security Notice USN-74-1 (<a href="http://bugs.debian.org/267837">http://bugs.debian.org/267837</a>)</p>
<p><strong>Affected Release:</strong> Ubuntu 4.10 (Warty Warthog)</p>
<p><strong>Affected Packages Are:</strong> postfix</p>
<p><strong>Fix:</strong> The problem can be corrected by upgrading the affected
package to version 2.1.3-1ubuntu17.1.  In general, a standard system
upgrade is sufficient to effect the necessary changes.</p>
<p><strong>More Information:</strong> <a href="http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000076.html">http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000076.html</a></p>


<h3>cpio vulnerability</h3>
<p>Ubuntu Security Notice USN-75-1 (CAN-1999-1572)</p>
<p><strong>Affected Release:</strong> Ubuntu 4.10 (Warty Warthog)</p>
<p><strong>Affected Packages Are:</strong> cpio</p>
<p><strong>Fix:</strong> The problem can be corrected by upgrading the affected
package to version 2.5-1.1ubuntu0.1.  In general, a standard system
upgrade is sufficient to effect the necessary changes.</p>
<p><strong>More Information:</strong> <a href="http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000077.html">http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000077.html</a></p>


<h3>postfix vulnerability</h3>
<p>Ubuntu Security Notice USN-74-2 (<a href="http://bugs.debian.org/267837">http://bugs.debian.org/267837</a>)</p>
<p><strong>Affected Release:</strong> Ubuntu 4.10 (Warty Warthog)</p>
<p><strong>Affected Packages Are:</strong> postfix</p>
<p><strong>Fix:</strong> The problem can be corrected by upgrading the affected
package to version 2.1.3-1ubuntu17.2.  In general, a standard system
upgrade is sufficient to effect the necessary changes.</p>
<p><strong>More Information:</strong> <a href="http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000078.html">http://lists.ubuntu.com/archives/ubuntu-security-announce/2005-February/000078.html</a></p>

</section>

</kc>

<!-- Keep this comment at the end of the file
Local variables:
mode: xml
sgml-omittag:t
sgml-shorttag:t
sgml-namecase-general:t
sgml-general-insert-case:lower
sgml-minimize-attributes:nil
sgml-always-quote-attributes:t
sgml-parent-document:nil
sgml-exposed-tags:nil
sgml-local-catalogs:nil
sgml-local-ecat-files:nil
sgml-indent-step:nil
sgml-indent-data:nil
sgml-set-face:t
End: -->
