Short news<\/h3>\n\n\n\n![\"\"](\"https:\/\/gambaru.de\/blog\/wp-content\/uploads\/2020\/07\/minetest.png\")
<\/figure>\n\n\n\n- The last month saw a new upstream release of Minetest<\/a> (version 5.3.), a multi-player sandbox game similar to Minecraft. A backport to buster-backports will follow shortly.<\/li>
- Asher Gordon helped release a new version of Berusky 2<\/a>, a sokoban like logic game but in 3D. The game received several improvements including bug fixes, code polishing and a new way to access the data files. Previously those files were all packed in a special container format but now they can be accessed directly without someone having to rely on some sort of unarchiver. I have uploaded this version as 0.12-1 to Debian unstable.<\/li>
- I tested an upstream patch for empire<\/a> to address the build failure with GCC 10. This one is a better solution than the currently implemented workaround and I expect it to be included in the next upstream release.<\/li>
- I fixed two FTBFS in simutrans-pak64<\/a> and simutrans-pak128.britain<\/a>, two addon packages for the simulation game simutrans.<\/li><\/ul>\n\n\n\n
Debian Java<\/h2>\n\n\n\n- New upstream versions this month: hsqldb<\/a>, libpdfbox2-java<\/a>, jackson-jr<\/a>, jackson-dataformat-xml<\/a> and jackson-databind<\/a>. The latter upload addressed several security vulnerabilites which have become rather minor because upstream has enabled safe default typing by default now. Nevertheless I have prepared a buster-security update as well which is already available in buster-proposed-updates.<\/li><\/ul>\n\n\n\n
Misc<\/h2>\n\n\n\n- I packaged new versions of wabt<\/a>, privacybadger<\/a> and binaryen<\/a> and applied another upstream patch for xarchiver<\/a> to address the incomplete fix for Debian bug #959914, to better handle encrypted multi-volume 7zip archives.<\/li>
- By popular request I uploaded imlib2<\/a> version 1.6 to buster-backports because the image library supports the webp format now.<\/li><\/ul>\n\n\n\n
Debian LTS<\/h2>\n\n\n\n
This was my 52. month as a paid contributor and I have been paid to work 60 hours on Debian LTS<\/a>, a project started by Rapha\u00ebl Hertzog<\/a>. In that time I did the following:<\/p>\n\n\n\n- DLA-2278-1<\/a>. Issued a security update for squid3 fixing 19 CVE. <\/li>
- DLA-2279-1<\/a>. Issued a security update for tomcat8 fixing 2 CVE.<\/li>
- Prepared and uploaded a stretch-pu update for jackson-databind fixing 20 CVE. (#964727<\/a>)<\/li>
- Synced the proftpd-dfsg version from Jessie with Stretch to address a memory leak which leads to a denial-of-service and correct the version number to make seemless updates work.<\/li>
- Prepared the security update for imagemagick triaging and\/or fixing 76 CVE.<\/li>
- Worked on updating the database about embedded code copies to determine how packages are affected by security vulnerabilities in embedded code copies. This included a) compiling a list of important packages which are regular affected by CVE, b) investigating if embedded code copies are present, c) determining the possible impact of a security vulnerability in those embedded code copies, d) writing a script that automates printing those findings on demand.<\/li><\/ul>\n\n\n\n
Thanks for reading and see you next time.<\/p>\n","protected":false},"excerpt":{"rendered":"
Welcome to gambaru.de. Here is my monthly report (+ the first week in July) that covers what I have been doing for Debian. If you’re interested in Java, Games and LTS topics, this might be interesting for you. Debian Games Short news The last month saw a new upstream release of Minetest (version 5.3.), a … <\/p>\n
<\/figure>\n\n\n\n- The last month saw a new upstream release of Minetest<\/a> (version 5.3.), a multi-player sandbox game similar to Minecraft. A backport to buster-backports will follow shortly.<\/li>
- Asher Gordon helped release a new version of Berusky 2<\/a>, a sokoban like logic game but in 3D. The game received several improvements including bug fixes, code polishing and a new way to access the data files. Previously those files were all packed in a special container format but now they can be accessed directly without someone having to rely on some sort of unarchiver. I have uploaded this version as 0.12-1 to Debian unstable.<\/li>
- I tested an upstream patch for empire<\/a> to address the build failure with GCC 10. This one is a better solution than the currently implemented workaround and I expect it to be included in the next upstream release.<\/li>
- I fixed two FTBFS in simutrans-pak64<\/a> and simutrans-pak128.britain<\/a>, two addon packages for the simulation game simutrans.<\/li><\/ul>\n\n\n\n
Debian Java<\/h2>\n\n\n\n
- New upstream versions this month: hsqldb<\/a>, libpdfbox2-java<\/a>, jackson-jr<\/a>, jackson-dataformat-xml<\/a> and jackson-databind<\/a>. The latter upload addressed several security vulnerabilites which have become rather minor because upstream has enabled safe default typing by default now. Nevertheless I have prepared a buster-security update as well which is already available in buster-proposed-updates.<\/li><\/ul>\n\n\n\n
Misc<\/h2>\n\n\n\n
- I packaged new versions of wabt<\/a>, privacybadger<\/a> and binaryen<\/a> and applied another upstream patch for xarchiver<\/a> to address the incomplete fix for Debian bug #959914, to better handle encrypted multi-volume 7zip archives.<\/li>
- By popular request I uploaded imlib2<\/a> version 1.6 to buster-backports because the image library supports the webp format now.<\/li><\/ul>\n\n\n\n
Debian LTS<\/h2>\n\n\n\n
This was my 52. month as a paid contributor and I have been paid to work 60 hours on Debian LTS<\/a>, a project started by Rapha\u00ebl Hertzog<\/a>. In that time I did the following:<\/p>\n\n\n\n
- DLA-2278-1<\/a>. Issued a security update for squid3 fixing 19 CVE. <\/li>
- DLA-2279-1<\/a>. Issued a security update for tomcat8 fixing 2 CVE.<\/li>
- Prepared and uploaded a stretch-pu update for jackson-databind fixing 20 CVE. (#964727<\/a>)<\/li>
- Synced the proftpd-dfsg version from Jessie with Stretch to address a memory leak which leads to a denial-of-service and correct the version number to make seemless updates work.<\/li>
- Prepared the security update for imagemagick triaging and\/or fixing 76 CVE.<\/li>
- Worked on updating the database about embedded code copies to determine how packages are affected by security vulnerabilities in embedded code copies. This included a) compiling a list of important packages which are regular affected by CVE, b) investigating if embedded code copies are present, c) determining the possible impact of a security vulnerability in those embedded code copies, d) writing a script that automates printing those findings on demand.<\/li><\/ul>\n\n\n\n
Thanks for reading and see you next time.<\/p>\n","protected":false},"excerpt":{"rendered":"
Welcome to gambaru.de. Here is my monthly report (+ the first week in July) that covers what I have been doing for Debian. If you’re interested in Java, Games and LTS topics, this might be interesting for you. Debian Games Short news The last month saw a new upstream release of Minetest (version 5.3.), a … <\/p>\n
- DLA-2279-1<\/a>. Issued a security update for tomcat8 fixing 2 CVE.<\/li>
- By popular request I uploaded imlib2<\/a> version 1.6 to buster-backports because the image library supports the webp format now.<\/li><\/ul>\n\n\n\n
- I packaged new versions of wabt<\/a>, privacybadger<\/a> and binaryen<\/a> and applied another upstream patch for xarchiver<\/a> to address the incomplete fix for Debian bug #959914, to better handle encrypted multi-volume 7zip archives.<\/li>
- Asher Gordon helped release a new version of Berusky 2<\/a>, a sokoban like logic game but in 3D. The game received several improvements including bug fixes, code polishing and a new way to access the data files. Previously those files were all packed in a special container format but now they can be accessed directly without someone having to rely on some sort of unarchiver. I have uploaded this version as 0.12-1 to Debian unstable.<\/li>