{"id":10427,"date":"2018-08-20T14:55:32","date_gmt":"2018-08-20T12:55:32","guid":{"rendered":"https:\/\/gambaru.de\/blog\/?p=10427"},"modified":"2018-08-20T14:55:32","modified_gmt":"2018-08-20T12:55:32","slug":"my-free-software-activities-in-july-2018","status":"publish","type":"post","link":"https:\/\/gambaru.de\/blog\/2018\/08\/20\/my-free-software-activities-in-july-2018\/","title":{"rendered":"My Free Software Activities in July 2018"},"content":{"rendered":"<p>Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you're interested in Java, Games and LTS topics, this might be interesting for you.<\/p>\n<h2>DebConf18 in Hsinchu\/Taiwan<\/h2>\n<ul>\n<li>This year the annual Debian Conference took place in the city of <a href=\"https:\/\/debconf18.debconf.org\/\">Hsinchu\/Taiwan<\/a>. I was there from the 26th of July to the 6th of August. I enjoyed almost two weeks of hacking and talks and met more than a few nice people. I gave an updated talk about the current <a href=\"https:\/\/debconf18.debconf.org\/talks\/122-debian-games-learn-more-about-free-software-games-in-debian\/\">status of Debian Games<\/a> and started a project <a href=\"https:\/\/debconf18.debconf.org\/talks\/123-debian-java-learn-how-to-package-java-applications-and-libraries-for-debian\/\">to improve our Java packaging documentation<\/a> (more about that in the next blog post).<\/li>\n<li>DebConf18 wasn't all about talking. I actually got some work done. I started with <a href=\"https:\/\/tracker.debian.org\/pkg\/wbar\">wbar<\/a> (RC <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=897885\">#897885<\/a>) and <a href=\"https:\/\/tracker.debian.org\/pkg\/lwjgl\">lwjgl<\/a> (RC <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=893302\">#893302<\/a>). I hope we still don't need OpenJDK 8 in buster for building packages but I don't think it would be the end of the world as long as we can avoid a runtime dependency. However it is clear that this only prolongs the inevitable. In <a href=\"https:\/\/tracker.debian.org\/pkg\/libpdfbox2-java\">libpdfbox2-java<\/a> I could close (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=899183\">#899183<\/a>) after I made sure that the last update corrected the problem.\u00a0 In the same vein I triaged an <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=897708\">RC bug<\/a> in <a href=\"https:\/\/tracker.debian.org\/pkg\/asc\">asc<\/a> after it became clear that asc was not affected by the GCC-8 transition.<\/li>\n<li>I had a go at <a href=\"https:\/\/tracker.debian.org\/pkg\/libjide-oss-java\">libjide-oss-java<\/a> (RC, <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=897491\">#897491<\/a>). So basically the package won't compile with OpenJDK 10 and later anymore because it depends on classes that were removed from the JDK. Fortunately for us they were only Windows-specific, so I could just remove the non-building classes. I hope there will be a better upstream solution in the future.<\/li>\n<li>I sponsored updates for <a href=\"https:\/\/tracker.debian.org\/pkg\/cutemaze\">cutemaze<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/connectagram\">connectagram<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/tanglet\">tanglet<\/a> for Innocent de Marchi.<\/li>\n<li>I packaged new upstream releases of several games and Java packages too and also released an update of <a href=\"https:\/\/tracker.debian.org\/pkg\/debian-games\">debian-games<\/a>, a Blend and collection of metapackages. New versions this month: <a href=\"https:\/\/tracker.debian.org\/pkg\/libokhttp-java\">libokhttp-java<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/okio\">okio<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/blockattack\">blockattack<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/peg-e\">peg-e<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/hexalate\">hexalate<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/robocode\">robocode<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/freeorion\">freeorion<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/hyperrogue\">hyperrogue<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/freeciv\">freeciv<\/a>.<\/li>\n<li>I released a small bug fix release for <a href=\"https:\/\/tracker.debian.org\/pkg\/marsshooter\">marsshooter<\/a> and hopefully made some KDE users happy.<\/li>\n<li>Thanks to Reiner Herrmann <a href=\"https:\/\/tracker.debian.org\/pkg\/love\">love<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/mrrescue\">mrrescue<\/a> are up-to-date again and free of RC bugs!<\/li>\n<li>I NMUed <a href=\"https:\/\/tracker.debian.org\/pkg\/bomberclone\">bomberclone<\/a> and fixed\/worked around a simple RC bug.<\/li>\n<li>Some guys talked me into maintaining <a href=\"https:\/\/tracker.debian.org\/pkg\/https-everywhere\">https-everywhere<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/ublock-origin\">ublock-origin<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/privacybadger\">privacybadger<\/a>. \ud83d\ude09<\/li>\n<li>One of the best aspects of any conference is that you can just talk to someone who sits at the same table as you if you want to solve a problem. Together with Andreas Tille I could finally solve a packaging issue in <a href=\"https:\/\/tracker.debian.org\/pkg\/pilon\">pilon<\/a>, which uses Scala. It would still be nice to have a working sbt build tool in Debian though.<\/li>\n<li>What can you say about Taiwan? I was impressed by the friendly people at the airport and railway stations who guided you along the way to Hsinchu and helped you out in case you struggled for directions.\u00a0 I have also learned on our day trip that you can just enter a police station to refill your water bottles. Those cold water producing machines are absolute\u00a0 lifesavers. Although I could only visit a small part of Taiwan and see Hsinchu and Taipei, I hope there will be a next time. Aah, and the weather was warm and humid. A bit too humid for my taste perhaps but I got used to it. Looking forward how it feels in spring or autumn. A big thanks goes out to all the people who organized and sponsored this DebConf. It was more than a pleasure.<\/li>\n<\/ul>\n<h2>Debian Java<\/h2>\n<ul>\n<li>Previously I packaged new upstream versions of <a href=\"https:\/\/tracker.debian.org\/pkg\/jboss-classfilewriter\">jboss-classfilewriter<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jboss-logmanager\">jboss-logmanager<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/bouncycastle\">bouncycastle<\/a>.<\/li>\n<li>I fixed an <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=897533\">RC bug<\/a> in <a href=\"https:\/\/tracker.debian.org\/pkg\/sunflow\">sunflow<\/a>.<\/li>\n<li>I restructured and rewrote our <a href=\"https:\/\/wiki.debian.org\/Java\/Packaging\">documentation about Java packaging<\/a>. This is still work in progress, probably forever because it is a Wiki.<\/li>\n<\/ul>\n<h2>Debian Games<\/h2>\n<ul>\n<li>Most exciting things happened at DebConf18 but before that I sponsored a new <a href=\"https:\/\/tracker.debian.org\/pkg\/simutrans\">simutrans<\/a> version, prepared by J\u00f6rg Frings-F\u00fcrst. Enjoy.<\/li>\n<\/ul>\n<h2>Debian LTS<\/h2>\n<p>This was my twenty-ninth month as a paid contributor and I have been paid to work 30 hours on <a href=\"https:\/\/wiki.debian.org\/LTS\/\">Debian LTS<\/a>, a project started by <a href=\"https:\/\/raphaelhertzog.com\">Rapha\u00ebl Hertzog<\/a>. In that time I did the following:<\/p>\n<ul>\n<li>From 09.07.2018 until 15.07.2018 I was in charge of our LTS frontdesk. I investigated and triaged CVE in mailman, ruby-sprockets, beep, audiofile, gpac, libarchive-zip-perl, libgit2, znc, ant, ceph, xapian-core, wine, radare2, policykit-1 and taglib.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00032.html\">DLA-1440-1<\/a>. Issued a security update for libarchive-zip-perl fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00033.html\">DLA-1441-1<\/a>. Issued a security update for sympa fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00034.html\">DLA-1442-1<\/a>. Issued a security update for mailman fixing 2 CVE. (also <a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00039.html\">DLA-1442-2<\/a>)<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00037.html\">DLA-1445-1<\/a>. Issued a security update for busybox fixing 10 CVE. Two regressions were discovered later and addressed in <a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/08\/msg00000.html\">DLA-1445-2<\/a> and <a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/08\/msg00003.html\">DLA-1445-3<\/a>.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00038.html\">DLA-1446-1<\/a>. Issued a security update for intel-microcode fixing 2 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00043.html\">DLA-1449-1<\/a>. Issued a security update for openssl fixing 2 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00046.html\">DLA-1452-1<\/a>. Issued a security update for wordpress fixing 2 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/07\/msg00047.html\">DLA-1453-1<\/a>. Issued a security update for tomcat7 fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/08\/msg00011.html\">DLA-1465-1<\/a>. Issued a security update for blender fixing 21 CVE.<\/li>\n<\/ul>\n<h2>ELTS<\/h2>\n<p>Extended Long Term Support (<a href=\"https:\/\/wiki.debian.org\/LTS\/Extended\">ELTS<\/a>) is a project led by <a href=\"https:\/\/www.freexian.com\/\">Freexian<\/a> to further extend the lifetime of Debian releases. It is not an official Debian project but all Debian users benefit from it without cost. The current ELTS release is Debian 7 \"Wheezy\". This was my second month and I have been paid to work 11.75\u00a0 hours on ELTS.<\/p>\n<ul>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-16-1-tiff\/\">ELA-16-1<\/a>. Issued a security update for tiff fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-17-1-linux\/\">ELA-17-1<\/a>. Issued a security update for linux 3.16 fixing 13 CVE.<\/li>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-18-1-intel-microcode\/\">ELA-18-1<\/a>. Issued a security update for intel-microcode fixing 3 CVE.<\/li>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-19-1-tiff3\/\">ELA-19-1<\/a>. Issued a security update for tiff3 fixing 2 CVE.<\/li>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-20-1-busybox\/\">ELA-20-1<\/a>. Issued a security update for busybox fixing 10 CVE.<\/li>\n<li>I investigated open issues in apache2 and found out that it was not affected by CVE-2018-1333 and CVE-2018-8011.<\/li>\n<li>I was in charge of our ELTS frontdesk from 09.07.2018 until 15.07.2018 and triaged further CVE in audiofile, libsndfile, curl, couchdb, policykit-1, bouncycastle and cups.<\/li>\n<\/ul>\n<p>Thanks for reading and see you next time.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you&#8217;re interested in Java, Games and LTS topics, this might be interesting for you. DebConf18 in Hsinchu\/Taiwan This year the annual Debian Conference took place in the city of Hsinchu\/Taiwan. I was there from the 26th of &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/gambaru.de\/blog\/2018\/08\/20\/my-free-software-activities-in-july-2018\/\" class=\"more-link\"><span class=\"screen-reader-text\">\u201eMy Free Software Activities in July 2018\u201c<\/span> weiterlesen<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[53,68,155],"_links":{"self":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/10427"}],"collection":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/comments?post=10427"}],"version-history":[{"count":0,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/10427\/revisions"}],"wp:attachment":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/media?parent=10427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/categories?post=10427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/tags?post=10427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}