{"id":9694,"date":"2016-04-04T01:53:14","date_gmt":"2016-04-03T23:53:14","guid":{"rendered":"https:\/\/www.gambaru.de\/blog\/?p=9694"},"modified":"2016-04-04T01:53:14","modified_gmt":"2016-04-03T23:53:14","slug":"my-free-software-activites-in-march-2016","status":"publish","type":"post","link":"https:\/\/gambaru.de\/blog\/2016\/04\/04\/my-free-software-activites-in-march-2016\/","title":{"rendered":"My Free Software Activities in March 2016"},"content":{"rendered":"<p>My monthly report covers what I have been doing for Debian. I write it for Debian's Long Term Support sponsors but also for the wider free software community in the hope that it might inspire people to get more involved with Debian or free software in general.<\/p>\n<h3>Debian LTS<\/h3>\n<p>This was my second month as a paid contributor and I have been paid to work 14,25 hours on <a href=\"https:\/\/wiki.debian.org\/LTS\/\">Debian LTS<\/a>. During this month I worked on the following things:<\/p>\n<ul>\n<li><a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2016\/msg00104.html\">DSA-3530-1<\/a>: I finished the work on <a href=\"https:\/\/tracker.debian.org\/pkg\/tomcat6\">Tomcat 6<\/a> which I started last month and closely worked together with Debian's Security Team who reviewed the package and eventually issued DSA-3530-1. This update fixed 18 CVEs in Wheezy and Jessie.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2016\/msg00098.html\">DSA-3524-1<\/a>: Prepared security updates for <a href=\"https:\/\/tracker.debian.org\/pkg\/activemq\">ActiveMQ<\/a> (Wheezy and Jessie) fixing one CVE.<\/li>\n<li><strong>Tomcat 7.<\/strong>\u00a0 Prepared security updates for <a href=\"https:\/\/tracker.debian.org\/pkg\/tomcat7\">Tomcat 7<\/a> fixing 9 CVEs in Wheezy and 7 CVEs in Jessie. I asked for reviews and testing on the <a href=\"https:\/\/lists.debian.org\/debian-java\/2016\/03\/msg00052.html\">debian-java mailing list<\/a> and I intend to finish the work in April.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2016\/msg00111.html\">DSA-3537-1<\/a>:\u00a0 Prepared security updates for <a href=\"https:\/\/tracker.debian.org\/pkg\/imlib2\">imlib2<\/a> fixing 3 CVEs in Wheezy and Jessie.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2016\/msg00112.html\">DSA-3538-1<\/a>:\u00a0 Prepared security updates for <a href=\"https:\/\/tracker.debian.org\/pkg\/libebml\">libebml<\/a> fixing 3 CVEs in Wheezy and Jessie.<\/li>\n<li><a href=\"https:\/\/lists.debian.org\/debian-security-announce\/2016\/msg00113.html\">DSA-3539-1<\/a>:\u00a0 Prepared security updates for <a href=\"https:\/\/tracker.debian.org\/pkg\/srtp\">srtp<\/a> fixing 1 CVE in Wheezy and Jessie.<\/li>\n<li><strong>roundcube<\/strong>. Prepared a security update for roundcube (Wheezy) fixing 1 CVE. Review by the Security Team is still pending. I expect a DSA in April.<\/li>\n<li><strong>optipng<\/strong>. Prepared and uploaded a <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=819499\">security update for optipng<\/a> to Wheezy fixing 1 CVE.<\/li>\n<li><strong>Making OpenJDK 7 the default-java implementation in Wheezy-LTS<\/strong>: March was also the month to prepare for the next LTS release on 2016-04-26. I worked several hours on the transition to OpenJDK 7 which will be supported for the whole LTS release cycle.\u00a0 I identified eighteen Java packages in Wheezy whose runtime dependencies must be updated to ensure that they will not pull in OpenJDK 6 by default but they will still work with OpenJDK 7. I updated the java-common package to make OpenJDK 7 the default-java implementation. I filed bug <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=819247\">#819247<\/a> against release.debian.org and asked the Release Team to include the updated Java packages in the last point release for Wheezy. This issue is pending now and I expect that those packages will either be uploaded as part of the next point update for Wheezy or at the beginning of Wheezy-LTS. I will continue to work on this task in April and provide a backport of java-common for testing purposes and upload no-change updates of Tomcat 6\/7, Jetty and java-common to Wheezy-LTS with NEWS files that inform users about the switch to OpenJDK 7. The goal is to switch default-java to OpenJDK 7 on 2016-06-26.<\/li>\n<\/ul>\n<h3>Debian Android<\/h3>\n<ul>\n<li><strong>android-platform-tools-base. <\/strong>I uploaded a new revision because I could eventually reenable the Lint module since <a href=\"https:\/\/tracker.debian.org\/pkg\/lombok-ast\">lombok-ast<\/a> got accepted into Debian which I had packaged one week before.<\/li>\n<li><strong>apktool. <\/strong>Thanks to <a href=\"https:\/\/github.com\/iBotPeaches\/Apktool\/pull\/1201\">Chirayu Desai<\/a>, who discovered a free public-domain implementation of the Little Endian data input stream class, I could fix apktool, close <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=819191\">#819191<\/a> and sync this version with Ubuntu.<\/li>\n<li><strong>android-platform-build<\/strong>. I sponsored a new revision for Kai-Chung.<\/li>\n<\/ul>\n<h3>Debian Java<\/h3>\n<ul>\n<li><strong>qdwizard. <\/strong>I sponsored qdwizard (ITP: <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=816426\">#816426<\/a>) prepared by Felix Natter, a new dependency for <a href=\"https:\/\/tracker.debian.org\/pkg\/jajuk\">Jajuk<\/a>, an advanced jukebox and music organizer.<\/li>\n<li><strong>netbeans.<\/strong> I tightened the dependency on Java 8 because Netbeans did not work correctly with Java 7. (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=816758\">#816758<\/a>, <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=817152\">#817152<\/a>)<\/li>\n<li>I triaged the following RC bugs for jpathwatch (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=816998\">#816998<\/a>),\u00a0 velocity (#<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=814679\">814679<\/a>), lwjgl (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=814167\">#814167<\/a>)<\/li>\n<li><strong>activemq<\/strong>. I spent several hours on upgrading <a href=\"https:\/\/tracker.debian.org\/pkg\/activemq\">ActiveMQ<\/a>, a Java message broker, to the latest upstream release 5.13.2 and closed two RC bugs (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=809733\">#809733<\/a>, <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=808636\">#808636<\/a>) and another bug (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=770455\">#770455<\/a>). All files under \/etc\/activemq will be properly removed on purge now. In addition this update required an update of <a href=\"https:\/\/tracker.debian.org\/pkg\/uima-as\">uima-as<\/a> that build-depends on libactivemq-java and while I was at it I did some spring cleaning and updated the related <a href=\"https:\/\/tracker.debian.org\/pkg\/activemq-protobuf\">activemq-protobuf<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/activemq-activeio\">activemq-activeio<\/a> packages as well.<\/li>\n<li><strong>uima-as.<\/strong> I updated <a href=\"https:\/\/tracker.debian.org\/pkg\/uima-as\">uima-as<\/a> and fixed an activemq related <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=818565\">RC bug<\/a>.<\/li>\n<li><strong>undertow and jboss. <\/strong>I packaged new upstream releases of <a href=\"https:\/\/tracker.debian.org\/pkg\/undertow\">undertow<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jboss-modules\">jboss-modules<\/a>, <a href=\"https:\/\/tracker.debian.org\/pkg\/jboss-jdeparser2\">jboss-jdeparser2<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/jboss-xnio\">jboss-xnio<\/a>.<\/li>\n<\/ul>\n<h3>Debian Games<\/h3>\n<ul>\n<li><strong>renpy.<\/strong> I packaged the latest upstream releases 6.99.9 and 6.99.10 of <a href=\"https:\/\/tracker.debian.org\/pkg\/pygame-sdl2\">python-pygame-sdl2<\/a> and <a href=\"https:\/\/tracker.debian.org\/pkg\/renpy\">renpy<\/a>, a framework for developing visual novel games.<\/li>\n<li><strong>spring. <\/strong>I packaged the latest release 101 of <a href=\"https:\/\/tracker.debian.org\/pkg\/spring\">spring<\/a>, a modern full-3D RTS game engine.<\/li>\n<li><strong>freesweep. <\/strong>I updated the whole <a href=\"https:\/\/tracker.debian.org\/pkg\/freesweep\">Freesweep<\/a> package, a minesweeper game for the console, to use modern Debian helpers and technologies. In this process I fixed four outstanding bugs.<\/li>\n<li><strong>atomix. <\/strong>I packaged the latest stable release of <a href=\"https:\/\/tracker.debian.org\/pkg\/atomix\">Atomix<\/a>, a puzzle game.<\/li>\n<li><strong>teg<\/strong>. I did another spring cleaning and updated <a href=\"https:\/\/tracker.debian.org\/pkg\/teg\">teg<\/a>, a strategy game like Risk.<\/li>\n<li><strong>hitori<\/strong>. Packaged new upstream release 3.20.0.<\/li>\n<li><strong>nikwi<\/strong>. Fixed bug <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=791966\">#791966<\/a> and added arm64 to nikwi's supported architectures.<\/li>\n<li><strong>dopewars<\/strong>. Fixed FTBFS bug <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=819619\">#819619<\/a>.<\/li>\n<li><strong>zaz<\/strong>. Fixed three bugs and triaged the remaining ones in <a href=\"https:\/\/tracker.debian.org\/pkg\/zaz\">zaz<\/a>, a 3D arcade action puzzle game.<\/li>\n<\/ul>\n<h3>Non-maintainer uploads<\/h3>\n<ul>\n<li><strong>mtpaint. <\/strong>Fixed RC bug (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=803286\">#803286)<\/a>, so that mtpaint could migrate to testing again.<\/li>\n<li><strong>pinball<\/strong>. Fixed FTBFS (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=816108\">#816108)<\/a> and another build failure when building with dpkg-buildpackage -A (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=806093\">#806093<\/a>). I also discovered that \/var\/games\/pinball is correctly removed on purge nowadays and closed <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=443493\">#443493<\/a>.<\/li>\n<li><strong>jcc<\/strong>. I NMUed <a href=\"https:\/\/tracker.debian.org\/pkg\/jcc\">jcc<\/a> and fixed two RC bugs because it was one the packages that blocked the removal of OpenJDK 7 from Debian.<\/li>\n<\/ul>\n<h3>QA uploads<\/h3>\n<ul>\n<li><strong>piespy.<\/strong> I did a QA upload for <a href=\"https:\/\/tracker.debian.org\/pkg\/piespy\">piespy<\/a> because it was one of the packages that blocked the removal of OpenJDK 7 from Debian.<\/li>\n<\/ul>\n<h3>Misc<\/h3>\n<ul>\n<li><strong>yics.<\/strong> I requested the removal of <a href=\"https:\/\/tracker.debian.org\/pkg\/yics\">yics<\/a> because this chess client was defunct without the Yahoo chess servers which closed down in 2014. (<a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=814360\">#814360<\/a>)<\/li>\n<li><strong>smc.<\/strong> I tried to fix <a href=\"https:\/\/bugs.debian.org\/cgi-bin\/bugreport.cgi?bug=812096\">#812096<\/a>, a FTBFS, and updated outdated CEGUI includes but I soon realized that more porting work had to be done and it would be best to package the lastest upstream release instead.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>My monthly report covers what I have been doing for Debian. I write it for Debian&#8217;s Long Term Support sponsors but also for the wider free software community in the hope that it might inspire people to get more involved with Debian or free software in general. Debian LTS This was my second month as &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/gambaru.de\/blog\/2016\/04\/04\/my-free-software-activites-in-march-2016\/\" class=\"more-link\"><span class=\"screen-reader-text\">\u201eMy Free Software Activities in March 2016\u201c<\/span> weiterlesen<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[53,68],"_links":{"self":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/9694"}],"collection":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/comments?post=9694"}],"version-history":[{"count":0,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/posts\/9694\/revisions"}],"wp:attachment":[{"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/media?parent=9694"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/categories?post=9694"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gambaru.de\/blog\/wp-json\/wp\/v2\/tags?post=9694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}