{"id":10044,"date":"2016-10-03T20:12:07","date_gmt":"2016-10-03T18:12:07","guid":{"rendered":"https:\/\/gambaru.de\/blog\/?p=10044"},"modified":"2016-10-03T20:12:07","modified_gmt":"2016-10-03T18:12:07","slug":"my-free-software-activities-in-september-2016","status":"publish","type":"post","link":"https:\/\/gambaru.de\/blog\/2016\/10\/03\/my-free-software-activities-in-september-2016\/","title":{"rendered":"My Free Software Activities in September 2016"},"content":{"rendered":"<p>Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you're interested in Android, Java, Games and LTS topics, this might be interesting for you.<\/p>\n<h2>Debian Android<\/h2>\n<ul>\n<li>I sponsored a new upstream release of <a href=\"https:\/\/tracker.debian.org\/pkg\/android-platform-tools-base\">android-platform-tools-base<\/a> prepared by Kai-Chung Yan and Chirayu Desai.<\/li>\n<\/ul>\n<h2>Debian Games<\/h2>\n<ul>\n<li>I packaged a new upstream release of <a href=\"https:\/\/tracker.debian.org\/pkg\/hyperrogue\">hyperrogue,<\/a> a rogue-like game settled in a non-euclidian world, fixing one RC bug (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=811991\">#811991<\/a>). I uploaded two more revisions later that addressed\u00a0 build failures on arm64 and hppa.<\/li>\n<li>I fixed more RC bugs (build failures with GCC-6) in <a href=\"https:\/\/tracker.debian.org\/pkg\/torus-trooper\">torus-trooper<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=835712\">#835712<\/a>) and <a href=\"https:\/\/tracker.debian.org\/pkg\/fife\">fife<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=811858\">#811858<\/a>).<\/li>\n<li>I packaged new upstream releases of <a href=\"https:\/\/tracker.debian.org\/pkg\/pygame-sdl2\">pygame-sdl2<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/renpy\">renpy,<\/a> <a href=\"https:\/\/tracker.debian.org\/pkg\/freeorion\">freeorion<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/netrek-client-cow\">netrek-client-cow<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/redeclipse\">redeclipse<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/redeclipse-data\">redeclipse-data<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/hitori\">hitori<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/atomix\">atomix<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/adonthell\">adonthell<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/adonthell-data\">adonthell-data<\/a>.<\/li>\n<li>I updated <a href=\"https:\/\/tracker.debian.org\/pkg\/gtkballs\">gtkballs<\/a> and fixed a documentation bug (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=820588\">#820588<\/a>) but also a \/usr\/share\/locale issue that prevented the actual use of the translations.<\/li>\n<li>I raised the severity of <a href=\"https:\/\/bugs.debian.org\/797998\">#797998<\/a> to grave in <a href=\"https:\/\/tracker.debian.org\/pkg\/unknown-horizons\">unknown-horizons<\/a> because the game cannot be started currently. In order to fix this issue I packaged a new build-dependency, <a href=\"https:\/\/anonscm.debian.org\/cgit\/pkg-games\/fifechan.git\">fifechan<\/a>, which is currently awaiting approval by the FTP team. As soon as fifechan got accepted I will upload new upstream releases of fife and unknown-horizons.<\/li>\n<li>I released <a href=\"https:\/\/tracker.debian.org\/pkg\/debian-games\">debian-games<\/a> 1.5, a Debian blend and collection of games metapackages.<\/li>\n<li>Hardening-wrapper has been deprecated for some time and this issue became release critical now. I updated <a href=\"https:\/\/tracker.debian.org\/pkg\/cookietool\">cookietool<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/alex4\">alex4<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/netrek-client-cow\">netrek-client-cow<\/a> to use dpkg-buildflags instead.<\/li>\n<li>Together with Russel Coker I packaged a new upstream release of <a href=\"https:\/\/tracker.debian.org\/pkg\/warzone2100\">warzone2100<\/a>. This package would benefit from a new regular uploader. If you are interested in it, please get involved. (Same story for hyperrogue, redeclipse, renpy and unknown-horizons and many other games.)<\/li>\n<li>I started a new <a href=\"https:\/\/tracker.debian.org\/pkg\/bullet\">Bullet<\/a> transition (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=839243\">#839243<\/a>). The package is currently waiting in the NEW queue and I hope to complete this work in October.<\/li>\n<li>I triaged <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=838199\">#838199<\/a> and reassigned the issue to <a href=\"https:\/\/tracker.debian.org\/pkg\/fonts-roboto\">fonts-roboto<\/a>. Initially I prepared an NMU but eventually the maintainer uploaded a new revision himself. It is now possible to install the hinted and unhinted versions of fonts-roboto together which also resolved former installation problems with kodi and freeorion.<\/li>\n<\/ul>\n<h2>Debian Java<\/h2>\n<ul>\n<li>I packaged new upstream releases of <a href=\"https:\/\/tracker.debian.org\/pkg\/undertow\">undertow,<\/a> <a href=\"https:\/\/tracker.debian.org\/pkg\/activemq\">activemq<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/jackrabbit\">jackrabbit<\/a>.<\/li>\n<li>I fixed RC bugs in <a href=\"https:\/\/tracker.debian.org\/pkg\/libphonenumber\">libphonenumber<\/a> (<a href=\"https:\/\/bugs.debian.org\/836768\">#836768<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/wagon2\">wagon2<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=837022\">#837022<\/a>) and <a href=\"https:\/\/tracker.debian.org\/pkg\/activemq\">activemq<\/a> (<a href=\"https:\/\/bugs.debian.org\/839244\">#839244<\/a>).<\/li>\n<li>I updated <a href=\"https:\/\/tracker.debian.org\/pkg\/syncany\">syncany<\/a> in experimental and simplified the packaging a little. Unfortunately upstream has been on hiatus for the past year and we haven't seen new releases in the meantime. Nevertheless give it a try, even though it is still alpha software, it's an useful cloud-storage and synchronization tool.<\/li>\n<li>I sponsored a new upstream release of <a href=\"https:\/\/tracker.debian.org\/pkg\/freeplane\">freeplane<\/a> for Felix Natter.<\/li>\n<li>I prepared and uploaded security updates for <a href=\"https:\/\/tracker.debian.org\/pkg\/jackrabbit\">jackrabbit<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/zookeeper\">zookeeper<\/a> in Jessie.<\/li>\n<\/ul>\n<h2>Debian LTS<\/h2>\n<p>This was my eight month as a paid contributor and I have been paid to work 12,25 hours on <a href=\"https:\/\/wiki.debian.org\/LTS\/\">Debian LTS<\/a>, a project started by <a href=\"https:\/\/raphaelhertzog.com\">Rapha\u00ebl Hertzog<\/a>. In that time I did the following:<\/p>\n<ul>\n<li>From 12. September until 19. September I was in charge of our LTS frontdesk. I triaged bugs in tiff3, mysql-5.5, curl, dropbear, mantis, icu, dwarfutils, jackrabbit, zendframework, zookeeper and graphicsmagick. For the latter I skimmed through all commits since the last version to identify the patches that fix the recent issues in graphicsmagick. I also answered questions on <a href=\"https:\/\/lists.debian.org\/debian-lts\/2016\/09\/threads.html\">the mailing list<\/a> and contacted Diego Biurrun again about his progress with libav. It is now anticipated that Hugo Lefeuvre and Diego will issue a new libav security release this month.<\/li>\n<li>I <a href=\"https:\/\/lists.debian.org\/debian-lts\/2016\/09\/msg00063.html\">reviewed and tested a patch<\/a> by Rapha\u00ebl Hertzog for roundcube.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2016\/09\/msg00022.html\">DLA-629-1<\/a>. Issued a security update for jackrabbit fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2016\/09\/msg00023.html\">DLA-630-1<\/a>. Issued a security update for zookeeper fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2016\/09\/msg00026.html\">DLA-633-1<\/a>. Issued a security update for wordpress fixing 7 CVE. This one also required backports of certain functions from newer releases and a database upgrade that required careful testing.<\/li>\n<li>I also issued <a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2016\/09\/msg00015.html\">DLA-622-1<\/a> and <a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2016\/09\/msg00016.html\">DLA-623-1,<\/a> two security issues that I already mentioned last month. It was discovered that Debian's versions of Tomcat were vulnerable to a root privilege escalation issue. However it was also necessary that another exploit, for instance in a web application, could be used to gain write access as the tomcat user. Former security issues were already fixed and new ones are not known. Nevertheless since a zero-day exploit could not be ruled out, the issue was embargoed for a month to give other distributions time to fix this issue as well. You can read more about this topic at <a href=\"http:\/\/legalhackers.com\/advisories\/Tomcat-Debian-based-Root-Privilege-Escalation-Exploit.txt\">legalhackers.com<\/a>.<\/li>\n<\/ul>\n<h2>Non-maintainer uploads<\/h2>\n<ul>\n<li>I fixed various RC bugs in several games that are not maintained by the Games Team. The following games will be available in Stretch again soon: <a href=\"https:\/\/tracker.debian.org\/pkg\/solarwolf\">solarwolf<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/enigma\">enigma<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/open-invaders\">open-invaders<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/crrcsim\">crrcsim<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/noiz2sa\">noiz2sa<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/csmash\">csmash<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/csmash-demosong\">csmash-demosong<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/glob2\">glob2<\/a>.<\/li>\n<\/ul>\n<h2>Misc<\/h2>\n<ul>\n<li>I packaged a new upstream release of <a href=\"https:\/\/tracker.debian.org\/pkg\/mediathekview\">MediathekView<\/a>.<\/li>\n<li>I uploaded a new revision of <a href=\"https:\/\/tracker.debian.org\/pkg\/xarchiver\">xarchiver<\/a> and applied a patch from Helmut Grohne that made it possible to cross-build the package.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you&#8217;re interested in Android, Java, Games and LTS topics, this might be interesting for you. Debian Android I sponsored a new upstream release of android-platform-tools-base prepared by Kai-Chung Yan and Chirayu Desai. Debian Games I packaged a &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/gambaru.de\/blog\/2016\/10\/03\/my-free-software-activities-in-september-2016\/\" class=\"more-link\"><span class=\"screen-reader-text\">\u201eMy Free Software Activities in September 2016\u201c<\/span> weiterlesen<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[53,68,155],"_links":{"self":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/10044"}],"collection":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/comments?post=10044"}],"version-history":[{"count":0,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/10044\/revisions"}],"wp:attachment":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/media?parent=10044"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/categories?post=10044"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/tags?post=10044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}