{"id":10473,"date":"2018-11-09T00:42:52","date_gmt":"2018-11-08T23:42:52","guid":{"rendered":"https:\/\/gambaru.de\/blog\/?p=10473"},"modified":"2018-11-09T00:42:52","modified_gmt":"2018-11-08T23:42:52","slug":"my-free-software-activities-in-october-2018","status":"publish","type":"post","link":"https:\/\/gambaru.de\/blog\/2018\/11\/09\/my-free-software-activities-in-october-2018\/","title":{"rendered":"My Free Software Activities in October 2018"},"content":{"rendered":"<p>Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you're interested in Java, Games and LTS topics, this might be interesting for you.<\/p>\n<h2>Debian Games<\/h2>\n<ul>\n<li>Again Yavor Doganov saved the day by porting <a href=\"https:\/\/tracker.debian.org\/pkg\/monster-masher\">monster-masher<\/a> away from obsolete libraries like esound and gconfmm (RC, <a href=\"https:\/\/bugs.debian.org\/848052\">#848052<\/a>, <a href=\"https:\/\/bugs.debian.org\/856086\">#856086<\/a>, <a href=\"https:\/\/bugs.debian.org\/885037\">#885037)<\/a>. I reviewed and sponsored the package for him again.<\/li>\n<li>G\u00fcrkan Myczko prepared a new upstream version of <a href=\"https:\/\/tracker.debian.org\/pkg\/greed\">greed<\/a>, a classic text-console game. I provided a desktop icon and sponsored the upload.<\/li>\n<li>Several games failed to build from source because freetype-config is gone and pkg-config must be used from now on. That required RC bug fixes in <a href=\"https:\/\/tracker.debian.org\/pkg\/asc\">asc<\/a> (#<a href=\"https:\/\/bugs.debian.org\/887600\">887600<\/a>),\u00a0 <a href=\"https:\/\/tracker.debian.org\/pkg\/brutalchess\">brutalchess<\/a> (#<a href=\"https:\/\/bugs.debian.org\/892337\">892337<\/a>, patch by Reiner Herrmann), <a href=\"https:\/\/tracker.debian.org\/pkg\/cube2font\">cube2font<\/a> (#<a href=\"https:\/\/bugs.debian.org\/892330\">892330<\/a>, patch by Reiner Herrmann with additional updates by Martin Erik Werner) and <a href=\"https:\/\/tracker.debian.org\/pkg\/scorched3d\">scorched3d<\/a> (#<a href=\"https:\/\/bugs.debian.org\/892434\">892434<\/a>, patch by Adrian Bunk)<\/li>\n<li>I packaged new upstream versions of <a href=\"https:\/\/tracker.debian.org\/pkg\/pcsx2\">pcsx2<\/a>, a Playstation 2 emulator, to fix RC bug #<a href=\"https:\/\/bugs.debian.org\/907411\">907411<\/a>, also <a href=\"https:\/\/tracker.debian.org\/pkg\/pygame-sdl2\">pygame-sdl2<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/renpy\">renpy<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/bzflag\">bzflag<\/a>.<\/li>\n<li>I refreshed the packaging of <a href=\"https:\/\/tracker.debian.org\/pkg\/abe\">abe<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/asc-music\">asc-music<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/amoebax\">amoebax,<\/a> <a href=\"https:\/\/tracker.debian.org\/pkg\/angrydd\">angrydd<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/airstrike\">airstrike<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/burgerspace\">burgerspace<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/berusky2\">berusky2<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/berusky-data\">berusky-data<\/a>.<\/li>\n<li>Dima Kogan approached me about improving the current <a href=\"https:\/\/tracker.debian.org\/pkg\/bullet\">Bullet<\/a> packaging and provided patches to build the double-precision library versions too.\u00a0 Bullet is a state-of-the-art C++ library for 3D collision detection, soft body and rigid body dynamics. I once introduced it to Debian because it was a required build-dependency of <a href=\"https:\/\/tracker.debian.org\/pkg\/freeorion\">freeorion<\/a>. Nowadays it powers several scientific applications. I still maintain it because I think it is a very useful library, e.g. used among others by <a href=\"https:\/\/www.openrobotics.org\/\">openrobotics<\/a>.<\/li>\n<li>\u00a0I spent most of the time this month on updating <a href=\"https:\/\/tracker.debian.org\/pkg\/teeworlds\">Teeworlds<\/a>. Since I run a Teeworlds server myself I discovered a remote denial-of-service vulnerability first hand. Of course my server was not the only target and the upstream developers\u00a0 had already released a fix. But I only got aware of it by chance. So I requested <a href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2018-18541\">CVE-2018-18541<\/a>, packaged the latest upstream release 0.7.0 and also prepared a security update for Stretch, released as <a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2018\/msg00261.html\">DSA-4329-1<\/a>.<\/li>\n<li>Last but not least I sponsored a new game created and prepared by Gerardo Ballabio called <a href=\"https:\/\/tracker.debian.org\/pkg\/galois\">galois<\/a>. It is a tetris-like game with special features like 3D and different brick shapes. It is currently waiting in the NEW queue.<\/li>\n<\/ul>\n<h2>Debian Java<\/h2>\n<ul>\n<li>October 2018 finally saw the switch to OpenJDK 11 as the default Java implementation in Debian. We will release with OpenJDK 11 because it is a long-term release and supported for at least five years. Although the fallout was not as bad when we switched from Java 8 to Java 9,\u00a0 a considerable amount of packages started to FTBFS again because of removed classes like javax.activation or jaxb API.<\/li>\n<li>This month I could also make significant progress with fixing OpenJFX 11 applications.\u00a0 <a href=\"https:\/\/tracker.debian.org\/pkg\/mediathekview\">MediathekView<\/a> is back on track (#<a href=\"https:\/\/bugs.debian.org\/910395\">910395<\/a>, #<a href=\"https:\/\/bugs.debian.org\/912350\">912350<\/a>) as is <a href=\"https:\/\/tracker.debian.org\/pkg\/pdfsam\">PDFsam<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/886394\">886394<\/a>). I had to overcome a bug in openjfx first (RC, #<a href=\"https:\/\/bugs.debian.org\/910501\">910501<\/a>) only to discover that GTK3 features are buggy on Wayland at the moment #<a href=\"https:\/\/bugs.debian.org\/910764\">910764<\/a>. The latter is clearly an upstream bug and I currently work around it by using GTK 2.<\/li>\n<li>In a nutshell here are the updated Java packages for October including new upstream versions and RC bug fixes.<a href=\"https:\/\/tracker.debian.org\/pkg\/libapache-mod-jk\"> libapache-mod-jk<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/gradle-jflex-plugin\">gradle-jflex-plugin<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/qdox2\">qdox2<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jackson-dataformat-xml\">jackson-dataformat-xml<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jackson-jr\">jackson-jr<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/cglib\">cglib<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/lombok-patcher\">lombok-patcher<\/a> (#<a href=\"https:\/\/bugs.debian.org\/906383\">906383<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/lombok\">lombok<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/lombok-ast\">lombok-ast<\/a> (#<a href=\"https:\/\/bugs.debian.org\/906382\">906382<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/commons-pool2\">commons-pool2<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jboss-logmanager\">jboss-logmanager<\/a>,<a href=\"https:\/\/tracker.debian.org\/pkg\/libpdfbox2-java\"> libpdfbox2-java<\/a> (CVE-2018-11797), <a href=\"https:\/\/tracker.debian.org\/pkg\/libpdfbox-java\">libpdfbox-java<\/a> (CVE-2018-11797), <a href=\"https:\/\/tracker.debian.org\/pkg\/fontawesomefx\">fontawesomefx<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/893194\">893194<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/triplea\">triplea<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/874132\">874132<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/syncany\">syncany<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/910457\">910457<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/libsambox-java\">libsambox-java<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/libsejda-java\">libsejda-java<\/a>,\u00a0 <a href=\"https:\/\/tracker.debian.org\/pkg\/objenesis\">objenesis<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jackrabbit\">jackrabbit<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/sweethome3d\">sweethome3d<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/sweethome3d-furniture\">sweethome3d-furniture<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/sweethome3d-furniture-editor\">sweethome3d-furniture-editor<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/libcodesize-java\">libcodesize-java<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/trove3\">trove3<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/912265\">912265<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/easymock\">easymock<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jboss-jdeparser\">jboss-jdeparser<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/912295\">912295<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/mockito\">mockito<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/910738\">910738<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/jboss-modules\">jboss-modules<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/912296\">912296<\/a>), <a href=\"https:\/\/tracker.debian.org\/pkg\/objenesis\">objenesis<\/a> (RC, #<a href=\"https:\/\/bugs.debian.org\/911980\">911980<\/a>)<\/li>\n<li>For MediathekView 13.2.1 I needed new packages: <a href=\"https:\/\/tracker.debian.org\/pkg\/commons-dbcp2\">commons-dbcp2<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jiconfont\">jiconfont<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jiconfont-swing\">jiconfont-swing<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jiconfont-awesome\">jiconfont-awesome<\/a>. They are currently waiting in the NEW queue.<\/li>\n<\/ul>\n<h2>Misc<\/h2>\n<ul>\n<li>I sponsored <a href=\"https:\/\/tracker.debian.org\/pkg\/android-platform-system-core\">android-platform-system-core<\/a> for Kai-Chung Yan and did a non-maintainer upload for <a href=\"https:\/\/tracker.debian.org\/pkg\/eboard\">eboard<\/a>, a chess client to fix RC bug #<a href=\"https:\/\/bugs.debian.org\/893167\">893167<\/a>. I forwarded some patches and I hope we will see another upstream release in the near future that addresses some <a href=\"https:\/\/github.com\/fbergo\/eboard\/issues\">issues<\/a>.<\/li>\n<li>I packaged a new upstream release of <a href=\"https:\/\/tracker.debian.org\/pkg\/ublock-origin\">ublock-origin<\/a>.<\/li>\n<\/ul>\n<h2>Debian LTS<\/h2>\n<p>This was my\u00a0thirty-second month as a paid contributor and I have been paid to work 30 hours on <a href=\"https:\/\/wiki.debian.org\/LTS\/\">Debian LTS<\/a>, a project started by <a href=\"https:\/\/raphaelhertzog.com\">Rapha\u00ebl Hertzog<\/a>. In that time I did the following:<\/p>\n<ul>\n<li>From 08.10.2018 until 14.10.2018 and 29.10.2018 until 4.11.2018 I was in charge of our LTS frontdesk. I investigated and triaged CVE in gnulib, otrs2, tcpreplay, net-snmp, ghostscript, paramiko, pyopenssl, qpdf, requests, glassfish, imagemagick, tomcat8, tomcat7, moin, glusterfs, mono, tiff, systemd, network-manager, shellinabox, openssl, curl, squid3, icecast2, sdl-image1.2, libsdl2-image, mkvtoolnix, libapache-mod-jk, mariadb-10.0, mysql-connector-java and jasper.<\/li>\n<li>There was a problem with our list manager and some announcements could not be preserved.<\/li>\n<li>DLA-1535-1. Issued a security update for php-horde fixing 1 CVE.<\/li>\n<li>DLA-1536-1. Issued a security update for php-horde-core fixing 1 CVE.<\/li>\n<li>DLA-1537-1. Issued a security update for php-horde-kronolith fixing 1 CVE.<\/li>\n<li>DLA-1540-1. Issued a security update for net-snmp fixing 1 CVE.<\/li>\n<li>DLA-1543-1. Issued a security update for gnulib fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/10\/msg00005.html\">DLA-1544-1<\/a>. Issued a security update for tomcat7 fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/10\/msg00006.html\">DLA-1545-1<\/a>. Issued a security update for tomcat8 fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/10\/msg00007.html\">DLA-1546-1<\/a>. Issued a security update for moin fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/10\/msg00013.html\">DLA-1552-1<\/a>. Issued a security update for ghostscript fixing 3 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/11\/msg00001.html\">DLA-1564-1<\/a>. Issued a security update for mono fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-lts-announce\/2018\/11\/msg00003.html\">DLA-1565-1<\/a>. Issued a security update for glusterfs fixing 5 CVE.<\/li>\n<\/ul>\n<h2>ELTS<\/h2>\n<p>Extended Long Term Support (<a href=\"https:\/\/wiki.debian.org\/LTS\/Extended\">ELTS<\/a>) is a project led by <a href=\"https:\/\/www.freexian.com\/\">Freexian<\/a> to further extend the lifetime of Debian releases. It is not an official Debian project but all Debian users benefit from it without cost. The current ELTS release is Debian 7 \"Wheezy\". This was my fifth month and I have been paid to work 15\u00a0 hours on ELTS.<\/p>\n<ul>\n<li>I was in charge of our ELTS frontdesk from 15.10.2018 until 21.10.2018 and I triaged CVE in chromium-browser, ghostscript, openexr, unzip, virtualbox, elfutils, liblivemedia, exiv2, movabletype-opensource, quemu, quemu-kvm, tiff and tcpreplay.<\/li>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-50-1-linux\/\">ELA-50-1<\/a>. Issued a security update for linux fixing 34 CVE.<\/li>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-51-1-tomcat7\/\">ELA-51-1<\/a>. Issued a security update for tomcat7 fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-54-1-curl\/\">ELA-54-1<\/a>. Issued a security update for curl fixing 1 CVE.<\/li>\n<li><a href=\"https:\/\/deb.freexian.com\/extended-lts\/updates\/ela-55-1-firmware-nonfree\/\">ELA-55-1<\/a>. Issued a security update for firmware-nonfree fixing 8 CVE.<\/li>\n<\/ul>\n<p>Thanks for reading and see you next time.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to gambaru.de. Here is my monthly report that covers what I have been doing for Debian. If you&#8217;re interested in Java, Games and LTS topics, this might be interesting for you. Debian Games Again Yavor Doganov saved the day by porting monster-masher away from obsolete libraries like esound and gconfmm (RC, #848052, #856086, #885037). &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/gambaru.de\/blog\/2018\/11\/09\/my-free-software-activities-in-october-2018\/\" class=\"more-link\"><span class=\"screen-reader-text\">\u201eMy Free Software Activities in October 2018\u201c<\/span> weiterlesen<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[53,68,155],"_links":{"self":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/10473"}],"collection":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/comments?post=10473"}],"version-history":[{"count":0,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/10473\/revisions"}],"wp:attachment":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/media?parent=10473"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/categories?post=10473"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/tags?post=10473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}