![\"\"](\"https:\/\/gambaru.de\/blog\/wp-content\/uploads\/2020\/08\/neverball_128.png\")
<\/figure>\n\n\n\n- Last month GCC 10 became the new default compiler for Debian 11 and compilation errors are now release critical. The change affected dozens of games in the archive but fortunately most of them are rather easy to fix and a quick workaround is available. I uploaded several packages with patches from Reiner Herrmann including blastem<\/a>, freegish<\/a>, gngb<\/a>, phlipple<\/a>, xaos<\/a>, xboard<\/a>, gamazons<\/a> and freesweep<\/a>. I could add to this list atomix<\/a>, teg<\/a>, neverball<\/a> and biniax2<\/a>. I am quite confident we can fix the rest of those FTBFS bugs before the freeze.<\/li>
- Finally freeorion<\/a> 0.4.10 was released last month. Among new gameplay changes and bug fixes, freeorion's Python 2 code was ported to Python 3.<\/li>
- Due to the ongoing Python 2 removal pygame-sdl2<\/a> in unstable could no longer be built from source and I had to upload the new Python 3 version from experimental. This in turn breaks renpy<\/a>, a framework for developing visual-novel type games. At the moment it is uncertain if there will be a Python 3 version of renpy for Debian 11 in time while this issue is still being worked on<\/a> upstream. <\/li>
- I uploaded a new upstream release of mgba<\/a>, a Game Boy Advance emulator, for Ryan Tandy.<\/li><\/ul>\n\n\n\n
Debian Java<\/h2>\n\n\n\n
- I packaged a new upstream release of libtwelvemonkeys-java<\/a> and prepared the security update of tomcat9<\/a> together with Emmanuel Bourg released as DSA-4627-1<\/a>.<\/li><\/ul>\n\n\n\n
Misc<\/h2>\n\n\n\n
- I fixed the GCC 10 FTBFS in iftop<\/a> and packaged a new upstream release of osmo<\/a>, a lean and lightweight personal organizer. <\/li>
- New versions of privacybadger<\/a>, binaryen<\/a>, wabt<\/a> and most importantly ublock-origin<\/a> are also available now. Since the new binary packages webext-ublock-origin-firefox and webext-ublock-origin-chromium were finally accepted into the archive, I am planning to package version 1.29.0 now.<\/li><\/ul>\n\n\n\n
Debian LTS<\/h2>\n\n\n\n
This was my 53. month as a paid contributor and I have been paid to work 15 hours on Debian LTS<\/a>, a project started by Rapha\u00ebl Hertzog<\/a>. In that time I did the following:<\/p>\n\n\n\n
- DLA-2278-2<\/a>. Issued a regression update for squid3. It was discovered that the patch for CVE-2019-12523 interrupted the communication between squid and icap or ecap services. The setup is most commonly used with clamav or similar antivirus scanners. I debugged the problem and created a new patch to address the error. In this process I also updated the patch for CVE-2019-12529 to use more code from Debian's cryptographic nettle library. I also enabled the test suite by default now and corrected a failing test.<\/li>
- I have been working on fixing CVE-2020-15049 in squid3. The upstream patch for the 4.x series appears to be simple but to completely address the underlying problem, squid3 requires a backport of the new HttpHeader parsing code which has improved a lot over the last couple of years. The patch is complete but requires more testing. A new update will follow soon.<\/li><\/ul>\n\n\n\n
ELTS<\/h2>\n\n\n\n
Extended Long Term Support (ELTS<\/a>) is a project led by Freexian<\/a> to further extend the lifetime of Debian releases. It is not an official Debian project but all Debian users benefit from it without cost. The current ELTS release is Debian 8 \u201eJessie\u201c. This was my 26. month and I have been paid to work 13,25 hours on ELTS.<\/p>\n\n\n\n
- ELA-242-1<\/a>. Issued a security update for tomcat7 fixing 1 CVE.<\/li>
- ELA-243-1<\/a>. Issued a security update for tomcat8 fixing 1 CVE.<\/li>
- ELA-253-1<\/a>. Issued a security update for imagemagick fixing 18 CVE.<\/li>
- ELA-254-1<\/a>. Issued a security update for libssh fixing 1 CVE.<\/li><\/ul>\n\n\n\n
Thanks for reading and see you next time.<\/p>\n","protected":false},"excerpt":{"rendered":"
Welcome to gambaru.de. Here is my monthly report (+ the first week in August) that covers what I have been doing for Debian. If you’re interested in Java, Games and LTS topics, this might be interesting for you. Debian Games Last month GCC 10 became the new default compiler for Debian 11 and compilation errors … <\/p>\n
- ELA-243-1<\/a>. Issued a security update for tomcat8 fixing 1 CVE.<\/li>
- I have been working on fixing CVE-2020-15049 in squid3. The upstream patch for the 4.x series appears to be simple but to completely address the underlying problem, squid3 requires a backport of the new HttpHeader parsing code which has improved a lot over the last couple of years. The patch is complete but requires more testing. A new update will follow soon.<\/li><\/ul>\n\n\n\n
- New versions of privacybadger<\/a>, binaryen<\/a>, wabt<\/a> and most importantly ublock-origin<\/a> are also available now. Since the new binary packages webext-ublock-origin-firefox and webext-ublock-origin-chromium were finally accepted into the archive, I am planning to package version 1.29.0 now.<\/li><\/ul>\n\n\n\n
- I fixed the GCC 10 FTBFS in iftop<\/a> and packaged a new upstream release of osmo<\/a>, a lean and lightweight personal organizer. <\/li>
- Finally freeorion<\/a> 0.4.10 was released last month. Among new gameplay changes and bug fixes, freeorion's Python 2 code was ported to Python 3.<\/li>