{"id":10253,"date":"2017-12-06T19:33:20","date_gmt":"2017-12-06T18:33:20","guid":{"rendered":"https:\/\/gambaru.de\/blog\/?p=10253"},"modified":"2017-12-06T19:33:20","modified_gmt":"2017-12-06T18:33:20","slug":"my-free-software-activities-in-november-2017","status":"publish","type":"post","link":"https:\/\/gambaru.de\/blog\/2017\/12\/06\/my-free-software-activities-in-november-2017\/","title":{"rendered":"My Free Software Activities in November 2017"},"content":{"rendered":"<p>Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you're interested in\u00a0 Java, Games and LTS topics, this might be interesting for you.<\/p>\n<h2>Debian Games<\/h2>\n<ul>\n<li>New upstream versions this month: <a href=\"https:\/\/tracker.debian.org\/pkg\/bzflag\">bzflag<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/pygame-sdl2\">pygame-sdl2<\/a>.<\/li>\n<li>I investigated a serious issue reported against widelands. (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=880990\">#880990<\/a>) It turned out that SDL2 was temporarily broken in testing and made the game unusable.<\/li>\n<li>I fixed two RC bugs in <a href=\"https:\/\/tracker.debian.org\/pkg\/atomix\">atomix<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=882004\">#882004<\/a>) and <a href=\"https:\/\/tracker.debian.org\/pkg\/asc\">asc<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=881998\">#881998<\/a>).<\/li>\n<li>The bug fix for <a href=\"https:\/\/tracker.debian.org\/pkg\/simutrans\">simutrans<\/a> was eventually accepted into Stretch. (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=869029\">#869029<\/a>). Thanks to Adam.<\/li>\n<li>I updated a few packages, applied patches and made some improvements in <a href=\"https:\/\/tracker.debian.org\/pkg\/viruskiller\">viruskiller<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=860731\">#860731<\/a>, <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=726900\">#726900<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/bulletml\">bulletml<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=847035\">#847035<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/lierolibre\">lierolibre<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=806452\">#806452<\/a>) and <a href=\"https:\/\/tracker.debian.org\/pkg\/sdlbasic\">sdlbasic<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=814025\">#814025<\/a>).<\/li>\n<\/ul>\n<h2>Debian Java<\/h2>\n<ul>\n<li>New upstream versions this month: <a href=\"https:\/\/tracker.debian.org\/pkg\/undertow\">undertow<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jackrabbit\">jackrabbit<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/libpdfbox2\">libpdfbox2<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/easymock\">easymock<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/libokhttp-java\">libokhttp-java<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/mediathekview\">mediathekview<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/pdfsam\">pdfsam<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/libsejda-java\">libsejda-java<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/libsambox-java\">libsambox-java<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/libnative-platform-java\">libnative-platform-java<\/a>.<\/li>\n<li>I updated <a href=\"https:\/\/tracker.debian.org\/pkg\/bnd\">bnd<\/a> (2.4.1-7) in order to help with the removal of Eclipse from Testing. Unfortunately there is more work to do and the only way forward is to package a newer version of Eclipse and to split the package in a way, so that such issues can be avoided in the future. P.S.: We appreciate help with maintaining <a href=\"https:\/\/tracker.debian.org\/pkg\/eclipse\">Eclipse<\/a>! (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=681726\">#681726<\/a>)<\/li>\n<li>I sponsored <a href=\"https:\/\/tracker.debian.org\/pkg\/libimglib2-java\">libimglib2-java<\/a> for Ghislain Antony Vaillant.<\/li>\n<li>I fixed a regression in <a href=\"https:\/\/tracker.debian.org\/pkg\/libmetadata-extractor-java\">libmetadata-extractor-java<\/a> related to relative classpaths. (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=880746\">#880746<\/a>)<\/li>\n<li>I spent more time on upgrading <a href=\"https:\/\/tracker.debian.org\/pkg\/gradle\">Gradle<\/a> to version 3.4.1 and finally succeeded. The package is in experimental now. Upgrading from 3.2.1 to 3.4.1 didn't seem like a big undertaking but the 8 MB debdiff and ~170000 lines of code changes proved me wrong. I discovered two regressions with this version in <a href=\"https:\/\/tracker.debian.org\/pkg\/mockito\">mockito<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/bnd\">bnd<\/a>. The former one could be resolved but bnd requires probably an upgrade as well. I would like to avoid that at the moment because major bnd upgrades tend to affect dozens of reverse-dependencies, mostly in a negative way.<\/li>\n<li><a href=\"https:\/\/tracker.debian.org\/pkg\/netbeans\">Netbeans<\/a> was affected by a regression in <a href=\"https:\/\/tracker.debian.org\/pkg\/jaxb\">jaxb<\/a> and failed to build from source. (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=882525\">#882525<\/a>) I could partly revert the damage but another bug in jaxb 2.3.0 is currently preventing a complete recovery.<\/li>\n<li>I fixed two Java 9 transition bugs in <a href=\"https:\/\/tracker.debian.org\/pkg\/libnative-platform-java\">libnative-platform-java<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=874645\">#874645<\/a>) and\u00a0<a href=\"https:\/\/tracker.debian.org\/pkg\/jedit\"> jedit<\/a> (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=875583\">#875583<\/a>).<\/li>\n<\/ul>\n<h2>Debian LTS<\/h2>\n<p>This was my twenty-first month as a paid contributor and I have been paid to work 14.75 hours (13 +1.75 from October) on <a href=\"https:\/\/wiki.debian.org\/LTS\/\">Debian LTS<\/a>, a project started by <a href=\"https:\/\/raphaelhertzog.com\">Rapha\u00ebl Hertzog<\/a>. In that time I did the following:<\/p>\n<ul>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2017\/11\/msg00023.html\">DLA-1177-1<\/a>. Issued a security update for poppler fixing 4 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2017\/11\/msg00024.html\">DLA-1178-1<\/a>. Issued a security update for opensaml2 fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2017\/11\/msg00025.html\">DLA-1179-1<\/a>. Issued a security update for shibboleth-sp2 fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2017\/11\/msg00026.html\">DLA-1180-1<\/a>. Issued a security update for libspring-ldap-java fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2017\/11\/msg00030.html\">DLA-1184-1<\/a>. Issued a security update for optipng fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2017\/11\/msg00031.html\">DLA-1185-1<\/a>. Issued a security update for sam2p fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2017\/11\/msg00043.html\">DLA-1197-1<\/a>. Issued a security update for sox fixing 7 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2017\/12\/msg00000.html\">DLA-1198-1<\/a>. Issued a security update for libextractor fixing 6 CVE. I also discovered that libextractor in buster\/sid is still affected by more security issues and reported my findings as Debian bug <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=883528\">#883528<\/a>.<\/li>\n<\/ul>\n<h2>Misc<\/h2>\n<ul>\n<li>I packaged a new upstream release of <a href=\"https:\/\/tracker.debian.org\/pkg\/osmo\">osmo<\/a>, a neat task manager and calendar application.<\/li>\n<li>I prepared a security update for sam2p, which will be part of the next Jessie point release, and libspring-ldap-java. (<a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2017\/msg00309.html\">DSA-4046-1<\/a>)<\/li>\n<\/ul>\n<p>Thanks for reading and see you next time.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you&#8217;re interested in\u00a0 Java, Games and LTS topics, this might be interesting for you. Debian Games New upstream versions this month: bzflag and pygame-sdl2. I investigated a serious issue reported against widelands. (#880990) It turned out that &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/gambaru.de\/blog\/2017\/12\/06\/my-free-software-activities-in-november-2017\/\" class=\"more-link\"><span class=\"screen-reader-text\">\u201eMy Free Software Activities in November 2017\u201c<\/span> weiterlesen<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[53,68,155],"_links":{"self":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/10253"}],"collection":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/comments?post=10253"}],"version-history":[{"count":0,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/10253\/revisions"}],"wp:attachment":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/media?parent=10253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/categories?post=10253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/tags?post=10253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}