Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you're interested in Java, Games and LTS topics, this might be interesting for you.
Debian Games
- Yavor Doganov continued his heroics in September and completed the port to GTK 3 of teg, a risk-like game. (#907834) Then he went on to fix gnome-breakout.
- I packaged a new upstream release of freesweep, a minesweeper game, which fixed some minor bugs but unfortunately not #907750.
- I spent most of the time this month on packaging a newer upstream version of unknown-horizons, a strategy game similar to the old Anno games. After also upgrading the fife engine, fifechan and NMUing python-enet, the game is up-to-date again.
- More new upstream versions this month: atomix, springlobby, pygame-sdl2, and renpy.
- I updated widelands to fix an incomplete appdata file (#857644) and to make the desktop icon visible again.
- I enabled gconf support in morris (#908611) again because gconf will be supported in Buster.
- Drascula, a classic adventure game, refused to start because of changes to the ScummVM engine. It is working now. (#908864)
- In other news I backported freeorion to Stretch and sponsored a new version of the runescape wrapper for Carlos Donizete Froes.
Debian Java
- Only late in September I found the time to work on JavaFX but by then Emmanuel Bourg had already done most of the work and upgraded OpenJFX to version 11. We now have a couple of broken packages (again) because JavaFX is no longer tied to the JRE but is designed more like a library. Since most projects still cling to JavaFX 8 we have to fix several build systems by accommodating those new circumstances. Surely there will be more to report next month.
- A Ubuntu user reported that importing furniture libraries was no longer possible in sweethome3d (LP: #1773532) when it is run with OpenJDK 10. Although upstream is more interested in supporting Java 6, another user found a fix which I could apply too.
- New upstream versions this month: jboss-modules, libtwelvemonkeys-java, robocode, apktool, activemq (RC #907688), cup and jflex. The cup/jflex update required a careful order of uploads because both packages depend on each other. After I confirmed that all reverse-dependencies worked as expected, both parsers are up-to-date again.
- I submitted two point updates for dom4j and tomcat-native to fix several security issues in Stretch.
Misc
- Firefox 60 landed in Stretch which broke all xul-* based browser plugins. I thought it made sense to backport at least two popular addons, ublock-origin and https-everywhere, to Stretch.
- I also prepared another security update for discount (DSA-4293-1) and uploaded libx11 to Stretch to fix three open CVE.
Debian LTS
This was my thirty-first month as a paid contributor and I have been paid to work 29,25 hours on Debian LTS, a project started by Raphaël Hertzog. In that time I did the following:
- From 24.09.2018 until 30.09.2018 I was in charge of our LTS frontdesk. I investigated and triaged CVE in dom4j, otrs2, strongswan, python2.7, udisks2, asterisk, php-horde, php-horde-core, php-horde-kronolith, binutils, jasperreports, monitoring-plugins, percona-xtrabackup, poppler, jekyll and golang-go.net-dev.
- DLA-1499-1. Issued a security update for discount fixing 4 CVE.
- DLA-1504-1. Issued a security update for ghostscript fixing 14 CVE.
- DLA-1506-1. Announced a security update for intel-microcode.
- DLA-1507-1. Issued a security update for libapache2-mod-perl2 fixing 1 CVE.
- DLA-1510-1. Issued a security update for glusterfs fixing 11 CVE.
- DLA-1511-1. Issued an update for reportbug.
- DLA-1513-1. Issued a security update for openafs fixing 3 CVE.
- DLA-1517-1. Issued a security update for dom4j fixing 1 CVE.
- DLA-1523-1. Issued a security update for asterisk fixing 1 CVE.
- DLA-1527-1 and DLA-1527-2. Issued a security update for ghostscript fixing 2 CVE and corrected an incomplete fix for CVE-2018-16543 later.
- I reviewed and uploaded strongswan and otrs2 for Abhijith PA.
ELTS
Extended Long Term Support (ELTS) is a project led by Freexian to further extend the lifetime of Debian releases. It is not an official Debian project but all Debian users benefit from it without cost. The current ELTS release is Debian 7 "Wheezy". This was my fourth month and I have been paid to work 15 hours on ELTS.
- I was in charge of our ELTS frontdesk from 10.09.2018 until 16.09.2018 and I triaged CVE in samba, activemq, chromium-browser, curl, dom4j, ghostscript, firefox-esr, elfutils, gitolite, glib2.0, glusterfs, imagemagick, lcms2, lcms, jhead, libpodofo, libtasn1-3, mgetty, opensc, openafs, okular, php5, smarty3, radare, sympa, wireshark, zsh, zziplib and intel-microcode.
- ELA-35-1. Issued a security update for samba fixing 1 CVE.
- ELA-36-1. Issued a security update for curl fixing 1 CVE.
- ELA-37-2. Issued a regression update for openssh.
- ELA-39-1. Issued a security update for intel-microcode addressing 6 CVE.
- ELA-42-1. Issued a security update for libapache2-mod-perl2 fixing 1 CVE.
- ELA-45-1. Issued a security update for dom4j fixing 1 CVE.
- I started to work on a security update for the Linux kernel which will be released shortly.
Thanks for reading and see you next time.