Debian Project News - July 21, 2015

IntnsRed's picture

Forums: 

------------------------------------------------------------------------
The Debian Project https://www.debian.org/
Debian Project News debian-publicity@lists.debian.org
July 21, 2015 https://www.debian.org/News/weekly/2015/06/
------------------------------------------------------------------------

Welcome to this year's sixth issue of DPN, the newsletter for the Debian community. Topics covered in this issue include:

* Perl team sprint
* New documentation guides on the Debian website
* Bits from the DPL
* Help rescuing Debian Live Rescue
* Debian switches to FFmpeg for multimedia packages
* Reproducible builds funded by the Linux Foundation
* Transition to GCC5 and libstdc++6
* Report from Google Summer of Code students
* Long Term Support reports
* Tips and Tricks
* Other news
* New Debian Contributors
* Important Debian Security Advisories
* New and noteworthy packages
* Work-needing packages
* Want to continue reading DPN?

Perl team sprint
----------------

The Debian Perl team had its first sprint [1] in May, and it was a success: seven members met in Barcelona over the weekend from May 22 to May 24 to kick off Perl development for Stretch and to work on QA tasks across the more than 3000 packages that the team maintains. Find all the details in the sprint report [2].

1: https://wiki.debian.org/Sprints/2015/DebianPerlSprint
2: https://lists.debian.org/debian-perl/2015/07/msg00009.html

New documentation guides on the Debian website
----------------------------------------------

On his blog, Osamu Aoki announced [3] some updates to Debian documentation. Having created the debmake [4] helper script to produce Debian source packages, to take into account new packaging best practices, he has rewritten the Debian Maintainers' Guide from scratch, available in the debmake-doc [5] package. Meanwhile, the Debian Handbook [6] is now also available from the Debian website [7]. This version is built automatically from the corresponding package [8] in Debian unstable. This is also the case for the documentation from debmake-doc [9] and more generally for other debian-doc related packages [10].

3: http://goofying-with-debian.blogspot.ru/
4: https://packages.debian.org/sid/debmake
5: https://packages.org/sid/debmake-doc
6: https://debian-handbook.info/
7: https://www.debian.org/News/weekly/2015/06/$HOME/doc/manuals/debian-handbook/
8: https://packages.debian.org/sid/debian-handbook
9: https://www.debian.org/News/weekly/2015/06/$HOME/doc/manuals/debmake-doc/index.en.html
10: https://www.debian.org/News/weekly/2015/06/$HOME/doc/

Bits from the DPL
-----------------

Neil McGovern, Debian project leader, sent a report [11] about his recent activities: communication (in particular an interview [12] by Steven Ovadia, and an open questions session [13] on Reddit), funding management, and work with trusted organisations.

11: https://lists.debian.org/debian-devel-announce/2015/07/msg00002.html
12: http://www.mylinuxrig.com/post/122864405658/the-linux-setup-neil-mcgover...
13: http://redd.it/3ctb6n

Help rescuing Debian Live Rescue
--------------------------------

Ben Armstrong sent [14] a second call for help to revive the rescue flavour of the Debian Live image, which missed the Debian Jessie release, with a list of tasks to achieve. If you are interested in helping with the Debian Live rescue image, contact the #debian-live IRC channel on irc.debian.org, or send an email to Debian Live mailing list [15].

14: http://syn.theti.ca/2015/06/23/debian-live-rescue-needs-some-love/
15: https://lists.debian.org/debian-live/

Debian switches to FFmpeg for multimedia packages
-------------------------------------------------

For the Wheezy release, the Debian project moved from having FFmpeg [16] as the provider of multimedia libraries to Libav [17], which is also in use in the Jessie release. The Debian Multimedia team announced [18] that after a careful review [19], they have decided to switch back to FFmpeg, and will do their best to finish the transition for the next stable release, Debian Stretch.

16: https://ffmpeg.org/
17: https://libav.org/
18: https://lists.debian.org/debian-devel-announce/2015/07/msg00001.html
19: https://wiki.debian.org/Debate/libav-provider/ffmpeg

Reproducible builds funded by the Linux Foundation
--------------------------------------------------

The Linux Fundation's Core Infrastructure Initiative [20] announced that they will support [21, 22] two Debian Developers, Holger Levsen and Jérémy Bobbio, with $200,000 to advance their Debian work on reproducible builds [23] and to collaborate more closely with other distributions such as Fedora, Ubuntu, and OpenWrt to benefit from this effort.

In the meantime, Jérémy Bobbio published [24] several [25] issues [26] of his weekly [27] report [28] from the Debian reproducible builds effort: since the last issue of the Debian Project News, about 500 packages have become reproducible.

20: https://www.coreinfrastructure.org/
21: http://www.linuxfoundation.org/news-media/announcements/2015/06/linux-fo...
22: https://bits.debian.org/2015/06/reproducible-builds-funded-by-cii.html
23: https://wiki.debian.org/ReproducibleBuilds
24: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_...
25: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_...
26: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_...
27: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_...
28: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_...

Transition to GCC5 and libstdc++6
---------------------------------

Matthias Klose sent a message [29] about the transition to GCC5 and libstdc++6, scheduled for the end of the month. Bugs were filed for packages failing to build from source [30] with the new GCC version, and for those where investigation is needed [31], to see if the transition to the new libstdc++ affects them. Details of the transition can be found on the dedicated Debian wiki page [32].

29: https://lists.debian.org/debian-devel-announce/2015/07/msg00000.html
30: https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ftbfs-gcc-5;users=debi...
31: https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=libstdc%2B%2B-cxx11;us...
32: https://wiki.debian.org/GCC5

Report from Google Summer of Code students
------------------------------------------

Yuru Roy Shao, mentored by Ritesh Raj Sarraf [33], is working on Apport integration in Debian. Yuru posted a report [34] on the new features he implemented: uniqueness of the apport-notifyd notification daemon instance, installation of debug symbols, use of the system APT cache to avoid downloading packages twice, and Debian BTS integration. Orestis Ioannou also sent an update [35] on the work he has done on a new web application, the copyright tracker, as part of the Debsources project.

33: http://www.researchut.com/blog/gsoc-apport-for-debian
34: http://blog.yurushao.info/2015/07/Debian-Apport-GSoC/
35: http://oioannou.com/2015/blog/gsoc-updates/

Long Term Support reports
-------------------------

Guido Günther [36], Thorsten Alteholz [37], Mike Gabriel [38], and Ben Hutchings [39] published their activities in Debian on their blogs, with a special emphasis on their work on Squeeze Long Term Support [40].

36: http://honk.sigxcpu.org/con/Debian_work_in_June_2015.html
37: http://blog.alteholz.eu/2015/07/my-debian-activities-in-june-2015/
38: http://sunweavers.net/blog/node/16
39: http://womble.decadent.org.uk/blog/debian-lts-work-june-2015.html
40: https://wiki.debian.org/LTS

Tips and Tricks
---------------

Several members of the Debian community shared some tips: Thomasz Buchert explained [41] how to tag emails which haven't been replied to, using notmuch [42]. Simon Josefsson explained [43] how to deal with SSH Host Certificates with a YubiKey NEO. Julien Danjou published [44] on his blog an article on the need to always consider timezone information with any timestamp, and how to do that in Python. Sandro Tosi explained [45] how to tweak the configuration of CFEngine [46] for package upgrades, to deal with epochs [47] in Debian versions. Michael Prokop noticed [48] on his blog that HAProxy causes random "Hash Sum mismatch" errors with Debian Squeeze clients. A solution to this issue was proposed in a comment by Petter Reinholdtsen.

41: https://tomasz.buchert.pl/blog/2015/06/14/notmuch-response
42: https://packages.debian.org/sid/notmuch
43: http://blog.josefsson.org/2015/06/16/ssh-host-certificates-with-yubikey-...
44: https://julien.danjou.info/blog/2015/python-and-timezones
45: http://sandrotosi.blogspot.com.au/2015/06/cfengine-upgrade-debian-packag...
46: https://packages.debian.org/sid/cfengine3
47: https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Version
48: http://michael-prokop.at/blog/2015/07/02/haproxy-with-debiansqueeze-clie...

Other news
----------

The 39th issue of the miscellaneous news for developers [49] has been released and covers the following topics:

* Android Tools Team
* Google Code closing
* uscan redirector pypi.debian.net
* Derivatives census update
* oldoldstable on DDPO

49: https://lists.debian.org/debian-devel-announce/2015/06/msg00002.html

Martin Michlmayr announced [50] that support for the D-Link DNS-323 and Conceptronic CH3SNAS has been removed in Debian Stretch, because the kernel is now too large to fit into the flash on these devices.

50: https://lists.debian.org/20150615204618.GA23765@jirafa.cyrius.com

The technical committee [51] published their decision [52] about the maintainership of the aptitude package [53].

51: https://www.debian.org/News/weekly/2015/06/$HOME/devel/tech-ctte
52: https://lists.debian.org/debian-devel-announce/2015/06/msg00004.html
53: https://packages.debian.org/sid/aptitude

Niels Thykier sent an update [54] on the status of automatically generated debug packages [55], with a summary of the missing pieces, hints on how people can help to improve the situation, and some answers to frequently asked questions.

54: https://lists.debian.org/debian-dpkg/2015/06/msg00018.html
55: https://wiki.debian.org/AutomaticDebugPackages

He also introduced in his blog [56] a new tool he created with the FTP masters for dak, the Debian Archive Kit. The purpose of the "auto-decrufter" is to identify common types of cruft (such as binary packages no longer built from any source package), and automatically remove them from unstable when nothing Depends or Build-Depends on them. Until recently that removal has been 100% manual and done by the FTP masters.

56: https://nthykier.wordpress.com/2015/06/22/introducing-dak-auto-decruft/

"Pirate" Praveen Arimbrathodiyil successfully managed to get a crowd-funding campaign to work full time for a month on the Debian packaging for the Diaspora [57] social network. He sent [58] a report explaining the different tasks he carried out, including packaging 23 dependencies and updating 34 existing packages.

57: https://diasporafoundation.org/
58: https://lists.debian.org/debian-devel/2015/07/msg00277.html

New Debian Contributors
-----------------------

4 applicants have been accepted [59] as Debian Developers, and 23 people have started to maintain packages [60] since the previous issue of the Debian Project News. Please welcome Diane Trout, Thomas Vincent, Chrysostomos Nanakos, Markus Wanner, Zhou Mo, Ilias Tsitsimpis, Daniel Dehennin, Marcel Fourné, Corey Bryant, Bertrand Neron, Thomas Calderon, Giovani Augusto Ferreira, Afif Elghraoui, Komal Dsukhani, Chris West, Senthil Kumaran S, Syam G Krishnan, Azat Khuzhin, Axel Burri, Larissa Reis, Sebastian Wouters, Gunter Königsmann, Dimitris Kalamaras, Orestis Ioannou, Sergio Durigan Junior, Roelof Berg, and Lucas de Castro Borges, into our project!

59: https://nm.debian.org/public/nmlist#done
60: https://udd.debian.org/cgi-bin/new-maintainers.cgi

Important Debian Security Advisories
------------------------------------

Debian's Security Team recently released advisories for these packages (among others): qemu [61], qemu-kvm [62], xen [63], openssl [64], libav [65], p7zip [66], linux [67], drupal7 [68], cinder [69], pyjwt [70], wireshark [71], cacti [72], libcrypto++ [73], unattended-upgrades [74], jackrabbit [75], stunnel4 [76], icewease [77], haproxy [78], libwmf [79], cups-filter [80], bind9 [81], python-django [82], pdns [83], pdns-recursor [84], and mysql-5.5 [85]. Please read them carefully and take the proper measures.

61: https://www.debian.org/security/2015/dsa-3284
62: https://www.debian.org/security/2015/dsa-3285
63: https://www.debian.org/security/2015/dsa-3286
64: https://www.debian.org/security/2015/dsa-3287
65: https://www.debian.org/security/2015/dsa-3288
66: https://www.debian.org/security/2015/dsa-3289
67: https://www.debian.org/security/2015/dsa-3290
68: https://www.debian.org/security/2015/dsa-3291
69: https://www.debian.org/security/2015/dsa-3292
70: https://www.debian.org/security/2015/dsa-3293
71: https://www.debian.org/security/2015/dsa-3294
72: https://www.debian.org/security/2015/dsa-3295
73: https://www.debian.org/security/2015/dsa-3296
74: https://www.debian.org/security/2015/dsa-3297
75: https://www.debian.org/security/2015/dsa-3298
76: https://www.debian.org/security/2015/dsa-3299
77: https://www.debian.org/security/2015/dsa-3300
78: https://www.debian.org/security/2015/dsa-3301
79: https://www.debian.org/security/2015/dsa-3302
80: https://www.debian.org/security/2015/dsa-3303
81: https://www.debian.org/security/2015/dsa-3304
82: https://www.debian.org/security/2015/dsa-3305
83: https://www.debian.org/security/2015/dsa-3306
84: https://www.debian.org/security/2015/dsa-3307
85: https://www.debian.org/security/2015/dsa-3308

The Debian team in charge of Squeeze Long Term Support released security update announcements for these packages: p7zip [86], linux-2.6 [87], linux-2.6 [88], openssl [89], qemu [90], qemu-kvm [91], libclamunrar [92], zendframework [93], postgresql-8.4 [94], zendframework [95], libwmf [96], librack-ruby [97], cacti [98], t1utils [99], libwmf [100], jqueryui [101], shibboleth-sp2 [102], hostapd [103], aptdaemon [104], libcrypto++ [105], ruby1.9.1 [106], libmodule-signature-perl [107], unattended-upgrades [108], pykerberos [109], libxml2 [110], aptdaemon [111], virtualbox-ose [112], linux-ftpd-ssl [113], bind9 [114], libunwind [115], and python-django [116]. Please read them carefully and take the proper measures.

86: https://lists.debian.org/debian-lts-announce/2015/06/msg00010.html
87: https://lists.debian.org/debian-lts-announce/2015/06/msg00011.html
88: https://lists.debian.org/debian-lts-announce/2015/06/msg00012.html
89: https://lists.debian.org/debian-lts-announce/2015/06/msg00013.html
90: https://lists.debian.org/debian-lts-announce/2015/06/msg00014.html
91: https://lists.debian.org/debian-lts-announce/2015/06/msg00015.html
92: https://lists.debian.org/debian-lts-announce/2015/06/msg00016.html
93: https://lists.debian.org/debian-lts-announce/2015/06/msg00017.html
94: https://lists.debian.org/debian-lts-announce/2015/06/msg00018.html
95: https://lists.debian.org/debian-lts-announce/2015/06/msg00019.html
96: https://lists.debian.org/debian-lts-announce/2015/06/msg00020.html
97: https://lists.debian.org/debian-lts-announce/2015/06/msg00021.html
98: https://lists.debian.org/debian-lts-announce/2015/06/msg00022.html
99: https://lists.debian.org/debian-lts-announce/2015/06/msg00023.html
100: https://lists.debian.org/debian-lts-announce/2015/06/msg00024.html
101: https://lists.debian.org/debian-lts-announce/2015/06/msg00025.html
102: https://lists.debian.org/debian-lts-announce/2015/06/msg00026.html
103: https://lists.debian.org/debian-lts-announce/2015/06/msg00027.html
104: https://lists.debian.org/debian-lts-announce/2015/06/msg00028.html
105: https://lists.debian.org/debian-lts-announce/2015/06/msg00029.html
106: https://lists.debian.org/debian-lts-announce/2015/07/msg00000.html
107: https://lists.debian.org/debian-lts-announce/2015/07/msg00001.html
108: https://lists.debian.org/debian-lts-announce/2015/07/msg00002.html
109: https://lists.debian.org/debian-lts-announce/2015/07/msg00003.html
110: https://lists.debian.org/debian-lts-announce/2015/07/msg00004.html
111: https://lists.debian.org/debian-lts-announce/2015/07/msg00005.html
112: https://lists.debian.org/debian-lts-announce/2015/07/msg00006.html
113: https://lists.debian.org/debian-lts-announce/2015/07/msg00007.html
114: https://lists.debian.org/debian-lts-announce/2015/07/msg00008.html
115: https://lists.debian.org/debian-lts-announce/2015/07/msg00009.html
116: https://lists.debian.org/debian-lts-announce/2015/07/msg00010.html

Debian's Stable Release Team released update announcements for these packages: clamav [117], open-vm-tools [118], tzdata [119], and libdatetime-timezone-perl [120]. Please read them carefully and take the proper measures.

117: https://lists.debian.org/debian-stable-announce/2015/05/msg00000.html
118: https://lists.debian.org/debian-stable-announce/2015/05/msg00001.html
119: https://lists.debian.org/debian-stable-announce/2015/06/msg00001.html
120: https://lists.debian.org/debian-stable-announce/2015/06/msg00002.html

Please note that these are a selection of the more important security advisories of the last weeks. If you need to be kept up to date about security advisories released by the Debian Security Team, please subscribe to the security mailing list [121] (and the separate backports list [122], and stable updates list [123]) for announcements.

121: https://lists.debian.org/debian-security-announce/
122: https://lists.debian.org/debian-backports-announce/
123: https://lists.debian.org/debian-stable-announce/

New and noteworthy packages
---------------------------

1633 packages were added to the unstable Debian archive recently. Among many others [124] are:

* blkreplay — block device testing and benchmarking toolkit [125]
* boomaga — virtual printer for viewing a document before printing [126]
* btrbk — backup tool for btrfs volumes [127]
* edid-decode — tool decoding to text the binary EDID information from monitors [128]
* elixir — dynamic, functional language on top of the Erlang VM [129]
* firejail — sandbox to restrict the application environment [130]
* iep — Interactive Editor for Python (Python 3) [131]
* lizardfs-master — distributed fault-tolerant file system resilient to data corruption [132]
* mmdb-bin — IP geolocation lookup command-line tool [133]
* muon — package manager for KDE [134]
* notmuch-addrlookup — address lookup tool for Notmuch [135]
* osmcoastline — tool to extract coastline data from OpenStreetMap planet file [136]
* sddm — modern display manager for X11 [137]
* trocla — tool to generate and store passwords and certificates on a central server [138]
* zulucrypt-cli — tool to encrypt volumes [139]

124: https://packages.debian.org/unstable/main/newpkg
125: https://packages.debian.org/unstable/main/blkreplay
126: https://packages.debian.org/unstable/main/boomaga
127: https://packages.debian.org/unstable/main/btrbk
128: https://packages.debian.org/unstable/main/edid-decode
129: https://packages.debian.org/unstable/main/elixir
130: https://packages.debian.org/unstable/main/firejail
131: https://packages.debian.org/unstable/main/iep
132: https://packages.debian.org/unstable/main/lizardfs-master
133: https://packages.debian.org/unstable/main/mmdb-bin
134: https://packages.debian.org/unstable/main/muon
135: https://packages.debian.org/unstable/main/notmuch-addrlookup
136: https://packages.debian.org/unstable/main/osmcoastline
137: https://packages.debian.org/unstable/main/sddm
138: https://packages.debian.org/unstable/main/trocla
139: https://packages.debian.org/unstable/main/zulucrypt-cli

Work-needing packages
---------------------

Currently [140] 673 packages are orphaned [141] and 176 packages are up for adoption [142]: please visit the complete list of packages which need your help [143].

140: https://lists.debian.org/debian-devel/2015/07/msg00125.html
141: https://www.debian.org/devel/wnpp/orphaned
142: https://www.debian.org/devel/wnpp/rfa
143: https://www.debian.org/devel/wnpp/help_requested

Want to continue reading DPN?
-----------------------------

Please help us create this newsletter. We still need more volunteer writers to watch the Debian community and report about what is going on. Please see the contributing page [144] to find out how to help. We're looking forward to receiving your mail at debian-publicity@lists.debian.org.

144: https://wiki.debian.org/ProjectNews/HowToContribute

This issue of Debian Project News was edited by Cédric Boutillier, Jean-Pierre Giraud, Donald Norwood, Justin B Rye, Paul Wise and Alex Muntada.