The Debian Project https://www.debian.org/
Debian Project News debian-publicity@xxxxxxxxxxxxxxxx
July 21, 2015 https://www.debian.org/News/weekly/2015/06/
------------------------------------------------------------------------
Welcome to this year's sixth issue of DPN, the newsletter for the Debian
community. Topics covered in this issue include:
* Perl team sprint
* New documentation guides on the Debian website
* Bits from the DPL
* Help rescuing Debian Live Rescue
* Debian switches to FFmpeg for multimedia packages
* Reproducible builds funded by the Linux Foundation
* Transition to GCC5 and libstdc++6
* Report from Google Summer of Code students
* Long Term Support reports
* Tips and Tricks
* Other news
* New Debian Contributors
* Important Debian Security Advisories
* New and noteworthy packages
* Work-needing packages
* Want to continue reading DPN?
Perl team sprint
----------------
The Debian Perl team had its first sprint [1] in May, and it was a
success: seven members met in Barcelona over the weekend from May 22 to
May 24 to kick off Perl development for Stretch and to work on QA tasks
across the more than 3000 packages that the team maintains. Find all the
details in the sprint report [2].
1: https://wiki.debian.org/Sprints/2015/DebianPerlSprint
2: https://lists.debian.org/debian-perl/2015/07/msg00009.html
New documentation guides on the Debian website
----------------------------------------------
On his blog, Osamu Aoki announced [3] some updates to Debian
documentation. Having created the debmake [4] helper script to produce
Debian source packages, to take into account new packaging best
practices, he has rewritten the Debian Maintainers' Guide from scratch,
available in the debmake-doc [5] package. Meanwhile, the Debian
Handbook [6] is now also available from the Debian website [7]. This
version is built automatically from the corresponding package [8] in
Debian unstable. This is also the case for the documentation from
debmake-doc [9] and more generally for other debian-doc related
packages [10].
3: http://goofying-with-debian.blogspot.ru/
4: https://packages.debian.org/sid/debmake
5: https://packages.org/sid/debmake-doc
6: https://debian-handbook.info/
7: https://www.debian.org/News/weekly/2015/06/$HOME/doc/manuals/debian-handbook/
8: https://packages.debian.org/sid/debian-handbook
9: https://www.debian.org/News/weekly/2015/06/$HOME/doc/manuals/debmake-doc/index.en.html
10: https://www.debian.org/News/weekly/2015/06/$HOME/doc/
Bits from the DPL
-----------------
Neil McGovern, Debian project leader, sent a report [11] about his
recent activities: communication (in particular an interview [12] by
Steven Ovadia, and an open questions session [13] on Reddit), funding
management, and work with trusted organisations.
11: https://lists.debian.org/debian-devel-announce/2015/07/msg00002.html
12: http://www.mylinuxrig.com/post/122864405658/the-linux-setup-neil-mcgovern-debian-project
13: http://redd.it/3ctb6n
Help rescuing Debian Live Rescue
--------------------------------
Ben Armstrong sent [14] a second call for help to revive the rescue
flavour of the Debian Live image, which missed the Debian Jessie
release, with a list of tasks to achieve. If you are interested in
helping with the Debian Live rescue image, contact the #debian-live IRC
channel on irc.debian.org, or send an email to Debian Live mailing
list [15].
14: http://syn.theti.ca/2015/06/23/debian-live-rescue-needs-some-love/
15: https://lists.debian.org/debian-live/
Debian switches to FFmpeg for multimedia packages
-------------------------------------------------
For the Wheezy release, the Debian project moved from having FFmpeg [16]
as the provider of multimedia libraries to Libav [17], which is also in
use in the Jessie release. The Debian Multimedia team announced [18]
that after a careful review [19], they have decided to switch back to
FFmpeg, and will do their best to finish the transition for the next
stable release, Debian Stretch.
16: https://ffmpeg.org/
17: https://libav.org/
18: https://lists.debian.org/debian-devel-announce/2015/07/msg00001.html
19: https://wiki.debian.org/Debate/libav-provider/ffmpeg
Reproducible builds funded by the Linux Foundation
--------------------------------------------------
The Linux Fundation's Core Infrastructure Initiative [20] announced
that they will support [21, 22] two Debian Developers, Holger Levsen and
Jérémy Bobbio, with $200,000 to advance their Debian work on
reproducible builds [23] and to collaborate more closely with other
distributions such as Fedora, Ubuntu, and OpenWrt to benefit from this
effort.
In the meantime, Jérémy Bobbio published [24] several [25] issues [26]
of his weekly [27] report [28] from the Debian reproducible builds
effort: since the last issue of the Debian Project News, about 500
packages have become reproducible.
20: https://www.coreinfrastructure.org/
21: http://www.linuxfoundation.org/news-media/announcements/2015/06/linux-foundation-s-core-infrastructure-initiative-funds-three-new
22: https://bits.debian.org/2015/06/reproducible-builds-funded-by-cii.html
23: https://wiki.debian.org/ReproducibleBuilds
24: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_7/
25: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_8/
26: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_9/
27: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_10/
28: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_11/
Transition to GCC5 and libstdc++6
---------------------------------
Matthias Klose sent a message [29] about the transition to GCC5 and
libstdc++6, scheduled for the end of the month. Bugs were filed for
packages failing to build from source [30] with the new GCC version, and
for those where investigation is needed [31], to see if the transition
to the new libstdc++ affects them. Details of the transition can be
found on the dedicated Debian wiki page [32].
29: https://lists.debian.org/debian-devel-announce/2015/07/msg00000.html
30: https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ftbfs-gcc-5;users=debian-gcc@xxxxxxxxxxxxxxxx
31: https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=libstdc%2B%2B-cxx11;users=debian-gcc@xxxxxxxxxxxxxxxx
32: https://wiki.debian.org/GCC5
Report from Google Summer of Code students
------------------------------------------
Yuru Roy Shao, mentored by Ritesh Raj Sarraf [33], is working on Apport
integration in Debian. Yuru posted a report [34] on the new features he
implemented: uniqueness of the apport-notifyd notification daemon
instance, installation of debug symbols, use of the system APT cache to
avoid downloading packages twice, and Debian BTS integration. Orestis
Ioannou also sent an update [35] on the work he has done on a new web
application, the copyright tracker, as part of the Debsources project.
33: http://www.researchut.com/blog/gsoc-apport-for-debian
34: http://blog.yurushao.info/2015/07/Debian-Apport-GSoC/
35: http://oioannou.com/2015/blog/gsoc-updates/
Long Term Support reports
-------------------------
Guido Günther [36], Thorsten Alteholz [37], Mike Gabriel [38], and Ben
Hutchings [39] published their activities in Debian on their blogs, with
a special emphasis on their work on Squeeze Long Term Support [40].
36: http://honk.sigxcpu.org/con/Debian_work_in_June_2015.html
37: http://blog.alteholz.eu/2015/07/my-debian-activities-in-june-2015/
38: http://sunweavers.net/blog/node/16
39: http://womble.decadent.org.uk/blog/debian-lts-work-june-2015.html
40: https://wiki.debian.org/LTS
Tips and Tricks
---------------
Several members of the Debian community shared some tips: Thomasz
Buchert explained [41] how to tag emails which haven't been replied to,
using notmuch [42]. Simon Josefsson explained [43] how to deal with SSH
Host Certificates with a YubiKey NEO. Julien Danjou published [44] on
his blog an article on the need to always consider timezone information
with any timestamp, and how to do that in Python. Sandro Tosi
explained [45] how to tweak the configuration of CFEngine [46] for
package upgrades, to deal with epochs [47] in Debian versions. Michael
Prokop noticed [48] on his blog that HAProxy causes random "Hash Sum
mismatch" errors with Debian Squeeze clients. A solution to this issue
was proposed in a comment by Petter Reinholdtsen.
41: https://tomasz.buchert.pl/blog/2015/06/14/notmuch-response
42: https://packages.debian.org/sid/notmuch
43: http://blog.josefsson.org/2015/06/16/ssh-host-certificates-with-yubikey-neo/
44: https://julien.danjou.info/blog/2015/python-and-timezones
45: http://sandrotosi.blogspot.com.au/2015/06/cfengine-upgrade-debian-packages.html
46: https://packages.debian.org/sid/cfengine3
47: https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Version
48: http://michael-prokop.at/blog/2015/07/02/haproxy-with-debiansqueeze-clients-causing-random-hash-sum-mismatch/
Other news
----------
The 39th issue of the miscellaneous news for developers [49] has been
released and covers the following topics:
* Android Tools Team
* Google Code closing
* uscan redirector pypi.debian.net
* Derivatives census update
* oldoldstable on DDPO
49: https://lists.debian.org/debian-devel-announce/2015/06/msg00002.html
Martin Michlmayr announced [50] that support for the D-Link DNS-323 and
Conceptronic CH3SNAS has been removed in Debian Stretch, because the
kernel is now too large to fit into the flash on these devices.
50: https://lists.debian.org/20150615204618.GA23765@xxxxxxxxxxxxxxxxx
The technical committee [51] published their decision [52] about the
maintainership of the aptitude package [53].
51: https://www.debian.org/News/weekly/2015/06/$HOME/devel/tech-ctte
52: https://lists.debian.org/debian-devel-announce/2015/06/msg00004.html
53: https://packages.debian.org/sid/aptitude
Niels Thykier sent an update [54] on the status of automatically
generated debug packages [55], with a summary of the missing pieces,
hints on how people can help to improve the situation, and some answers
to frequently asked questions.
54: https://lists.debian.org/debian-dpkg/2015/06/msg00018.html
55: https://wiki.debian.org/AutomaticDebugPackages
He also introduced in his blog [56] a new tool he created with the FTP
masters for dak, the Debian Archive Kit. The purpose of the "auto-
decrufter" is to identify common types of cruft (such as binary packages
no longer built from any source package), and automatically remove them
from unstable when nothing Depends or Build-Depends on them. Until
recently that removal has been 100% manual and done by the FTP masters.
56: https://nthykier.wordpress.com/2015/06/22/introducing-dak-auto-decruft/
"Pirate" Praveen Arimbrathodiyil successfully managed to get a crowd-
funding campaign to work full time for a month on the Debian packaging
for the Diaspora [57] social network. He sent [58] a report explaining
the different tasks he carried out, including packaging 23 dependencies
and updating 34 existing packages.
57: https://diasporafoundation.org/
58: https://lists.debian.org/debian-devel/2015/07/msg00277.html
New Debian Contributors
-----------------------
4 applicants have been accepted [59] as Debian Developers, and 23 people
have started to maintain packages [60] since the previous issue of the
Debian Project News. Please welcome Diane Trout, Thomas Vincent,
Chrysostomos Nanakos, Markus Wanner, Zhou Mo, Ilias Tsitsimpis, Daniel
Dehennin, Marcel Fourné, Corey Bryant, Bertrand Neron, Thomas Calderon,
Giovani Augusto Ferreira, Afif Elghraoui, Komal Dsukhani, Chris West,
Senthil Kumaran S, Syam G Krishnan, Azat Khuzhin, Axel Burri, Larissa
Reis, Sebastian Wouters, Gunter Königsmann, Dimitris Kalamaras, Orestis
Ioannou, Sergio Durigan Junior, Roelof Berg, and Lucas de Castro Borges,
into our project!
59: https://nm.debian.org/public/nmlist#done
60: https://udd.debian.org/cgi-bin/new-maintainers.cgi
Important Debian Security Advisories
------------------------------------
Debian's Security Team recently released advisories for these packages
(among others): qemu [61], qemu-kvm [62], xen [63], openssl [64],
libav [65], p7zip [66], linux [67], drupal7 [68], cinder [69],
pyjwt [70], wireshark [71], cacti [72], libcrypto++ [73],
unattended-upgrades [74], jackrabbit [75], stunnel4 [76],
icewease [77], haproxy [78], libwmf [79], cups-filter [80], bind9 [81],
python-django [82], pdns [83], pdns-recursor [84], and mysql-5.5 [85].
Please read them carefully and take the proper measures.
61: https://www.debian.org/security/2015/dsa-3284
62: https://www.debian.org/security/2015/dsa-3285
63: https://www.debian.org/security/2015/dsa-3286
64: https://www.debian.org/security/2015/dsa-3287
65: https://www.debian.org/security/2015/dsa-3288
66: https://www.debian.org/security/2015/dsa-3289
67: https://www.debian.org/security/2015/dsa-3290
68: https://www.debian.org/security/2015/dsa-3291
69: https://www.debian.org/security/2015/dsa-3292
70: https://www.debian.org/security/2015/dsa-3293
71: https://www.debian.org/security/2015/dsa-3294
72: https://www.debian.org/security/2015/dsa-3295
73: https://www.debian.org/security/2015/dsa-3296
74: https://www.debian.org/security/2015/dsa-3297
75: https://www.debian.org/security/2015/dsa-3298
76: https://www.debian.org/security/2015/dsa-3299
77: https://www.debian.org/security/2015/dsa-3300
78: https://www.debian.org/security/2015/dsa-3301
79: https://www.debian.org/security/2015/dsa-3302
80: https://www.debian.org/security/2015/dsa-3303
81: https://www.debian.org/security/2015/dsa-3304
82: https://www.debian.org/security/2015/dsa-3305
83: https://www.debian.org/security/2015/dsa-3306
84: https://www.debian.org/security/2015/dsa-3307
85: https://www.debian.org/security/2015/dsa-3308
The Debian team in charge of Squeeze Long Term Support released security
update announcements for these packages: p7zip [86], linux-2.6 [87],
linux-2.6 [88], openssl [89], qemu [90], qemu-kvm [91],
libclamunrar [92], zendframework [93], postgresql-8.4 [94],
zendframework [95], libwmf [96], librack-ruby [97], cacti [98],
t1utils [99], libwmf [100], jqueryui [101], shibboleth-sp2 [102],
hostapd [103], aptdaemon [104], libcrypto++ [105], ruby1.9.1 [106],
libmodule-signature-perl [107], unattended-upgrades [108],
pykerberos [109], libxml2 [110], aptdaemon [111], virtualbox-ose [112],
linux-ftpd-ssl [113], bind9 [114], libunwind [115], and
python-django [116]. Please read them carefully and take the proper measures.
86: https://lists.debian.org/debian-lts-announce/2015/06/msg00010.html
87: https://lists.debian.org/debian-lts-announce/2015/06/msg00011.html
88: https://lists.debian.org/debian-lts-announce/2015/06/msg00012.html
89: https://lists.debian.org/debian-lts-announce/2015/06/msg00013.html
90: https://lists.debian.org/debian-lts-announce/2015/06/msg00014.html
91: https://lists.debian.org/debian-lts-announce/2015/06/msg00015.html
92: https://lists.debian.org/debian-lts-announce/2015/06/msg00016.html
93: https://lists.debian.org/debian-lts-announce/2015/06/msg00017.html
94: https://lists.debian.org/debian-lts-announce/2015/06/msg00018.html
95: https://lists.debian.org/debian-lts-announce/2015/06/msg00019.html
96: https://lists.debian.org/debian-lts-announce/2015/06/msg00020.html
97: https://lists.debian.org/debian-lts-announce/2015/06/msg00021.html
98: https://lists.debian.org/debian-lts-announce/2015/06/msg00022.html
99: https://lists.debian.org/debian-lts-announce/2015/06/msg00023.html
100: https://lists.debian.org/debian-lts-announce/2015/06/msg00024.html
101: https://lists.debian.org/debian-lts-announce/2015/06/msg00025.html
102: https://lists.debian.org/debian-lts-announce/2015/06/msg00026.html
103: https://lists.debian.org/debian-lts-announce/2015/06/msg00027.html
104: https://lists.debian.org/debian-lts-announce/2015/06/msg00028.html
105: https://lists.debian.org/debian-lts-announce/2015/06/msg00029.html
106: https://lists.debian.org/debian-lts-announce/2015/07/msg00000.html
107: https://lists.debian.org/debian-lts-announce/2015/07/msg00001.html
108: https://lists.debian.org/debian-lts-announce/2015/07/msg00002.html
109: https://lists.debian.org/debian-lts-announce/2015/07/msg00003.html
110: https://lists.debian.org/debian-lts-announce/2015/07/msg00004.html
111: https://lists.debian.org/debian-lts-announce/2015/07/msg00005.html
112: https://lists.debian.org/debian-lts-announce/2015/07/msg00006.html
113: https://lists.debian.org/debian-lts-announce/2015/07/msg00007.html
114: https://lists.debian.org/debian-lts-announce/2015/07/msg00008.html
115: https://lists.debian.org/debian-lts-announce/2015/07/msg00009.html
116: https://lists.debian.org/debian-lts-announce/2015/07/msg00010.html
Debian's Stable Release Team released update announcements for these
packages: clamav [117], open-vm-tools [118], tzdata [119], and
libdatetime-timezone-perl [120]. Please read them carefully and take the
proper measures.
117: https://lists.debian.org/debian-stable-announce/2015/05/msg00000.html
118: https://lists.debian.org/debian-stable-announce/2015/05/msg00001.html
119: https://lists.debian.org/debian-stable-announce/2015/06/msg00001.html
120: https://lists.debian.org/debian-stable-announce/2015/06/msg00002.html
Please note that these are a selection of the more important security
advisories of the last weeks. If you need to be kept up to date about
security advisories released by the Debian Security Team, please
subscribe to the security mailing list [121] (and the separate backports
list [122], and stable updates list [123]) for announcements.
121: https://lists.debian.org/debian-security-announce/
122: https://lists.debian.org/debian-backports-announce/
123: https://lists.debian.org/debian-stable-announce/
New and noteworthy packages
---------------------------
1633 packages were added to the unstable Debian archive recently. Among
many others [124] are:
* blkreplay — block device testing and benchmarking toolkit [125]
* boomaga — virtual printer for viewing a document before printing [126]
* btrbk — backup tool for btrfs volumes [127]
* edid-decode — tool decoding to text the binary EDID information from monitors [128]
* elixir — dynamic, functional language on top of the Erlang VM [129]
* firejail — sandbox to restrict the application environment [130]
* iep — Interactive Editor for Python (Python 3) [131]
* lizardfs-master — distributed fault-tolerant file system resilient to data corruption [132]
* mmdb-bin — IP geolocation lookup command-line tool [133]
* muon — package manager for KDE [134]
* notmuch-addrlookup — address lookup tool for Notmuch [135]
* osmcoastline — tool to extract coastline data from OpenStreetMap planet file [136]
* sddm — modern display manager for X11 [137]
* trocla — tool to generate and store passwords and certificates on a central server [138]
* zulucrypt-cli — tool to encrypt volumes [139]
124: https://packages.debian.org/unstable/main/newpkg
125: https://packages.debian.org/unstable/main/blkreplay
126: https://packages.debian.org/unstable/main/boomaga
127: https://packages.debian.org/unstable/main/btrbk
128: https://packages.debian.org/unstable/main/edid-decode
129: https://packages.debian.org/unstable/main/elixir
130: https://packages.debian.org/unstable/main/firejail
131: https://packages.debian.org/unstable/main/iep
132: https://packages.debian.org/unstable/main/lizardfs-master
133: https://packages.debian.org/unstable/main/mmdb-bin
134: https://packages.debian.org/unstable/main/muon
135: https://packages.debian.org/unstable/main/notmuch-addrlookup
136: https://packages.debian.org/unstable/main/osmcoastline
137: https://packages.debian.org/unstable/main/sddm
138: https://packages.debian.org/unstable/main/trocla
139: https://packages.debian.org/unstable/main/zulucrypt-cli
Work-needing packages
---------------------
Currently [140] 673 packages are orphaned [141] and 176 packages are up
for adoption [142]: please visit the complete list of packages which
need your help [143].
140: https://lists.debian.org/debian-devel/2015/07/msg00125.html
141: https://www.debian.org/devel/wnpp/orphaned
142: https://www.debian.org/devel/wnpp/rfa
143: https://www.debian.org/devel/wnpp/help_requested
Want to continue reading DPN?
-----------------------------
Please help us create this newsletter. We still need more volunteer
writers to watch the Debian community and report about what is going on.
Please see the contributing page [144] to find out how to help. We're
looking forward to receiving your mail at
<debian-publicity@xxxxxxxxxxxxxxxx>.
144: https://wiki.debian.org/ProjectNews/HowToContribute
This issue of Debian Project News was edited by Cédric Boutillier, Jean-
Pierre Giraud, Donald Norwood, Justin B Rye, Paul Wise and Alex Muntada.
Debian Project News debian-publicity@xxxxxxxxxxxxxxxx
July 21, 2015 https://www.debian.org/News/weekly/2015/06/
------------------------------------------------------------------------
Welcome to this year's sixth issue of DPN, the newsletter for the Debian
community. Topics covered in this issue include:
* Perl team sprint
* New documentation guides on the Debian website
* Bits from the DPL
* Help rescuing Debian Live Rescue
* Debian switches to FFmpeg for multimedia packages
* Reproducible builds funded by the Linux Foundation
* Transition to GCC5 and libstdc++6
* Report from Google Summer of Code students
* Long Term Support reports
* Tips and Tricks
* Other news
* New Debian Contributors
* Important Debian Security Advisories
* New and noteworthy packages
* Work-needing packages
* Want to continue reading DPN?
Perl team sprint
----------------
The Debian Perl team had its first sprint [1] in May, and it was a
success: seven members met in Barcelona over the weekend from May 22 to
May 24 to kick off Perl development for Stretch and to work on QA tasks
across the more than 3000 packages that the team maintains. Find all the
details in the sprint report [2].
1: https://wiki.debian.org/Sprints/2015/DebianPerlSprint
2: https://lists.debian.org/debian-perl/2015/07/msg00009.html
New documentation guides on the Debian website
----------------------------------------------
On his blog, Osamu Aoki announced [3] some updates to Debian
documentation. Having created the debmake [4] helper script to produce
Debian source packages, to take into account new packaging best
practices, he has rewritten the Debian Maintainers' Guide from scratch,
available in the debmake-doc [5] package. Meanwhile, the Debian
Handbook [6] is now also available from the Debian website [7]. This
version is built automatically from the corresponding package [8] in
Debian unstable. This is also the case for the documentation from
debmake-doc [9] and more generally for other debian-doc related
packages [10].
3: http://goofying-with-debian.blogspot.ru/
4: https://packages.debian.org/sid/debmake
5: https://packages.org/sid/debmake-doc
6: https://debian-handbook.info/
7: https://www.debian.org/News/weekly/2015/06/$HOME/doc/manuals/debian-handbook/
8: https://packages.debian.org/sid/debian-handbook
9: https://www.debian.org/News/weekly/2015/06/$HOME/doc/manuals/debmake-doc/index.en.html
10: https://www.debian.org/News/weekly/2015/06/$HOME/doc/
Bits from the DPL
-----------------
Neil McGovern, Debian project leader, sent a report [11] about his
recent activities: communication (in particular an interview [12] by
Steven Ovadia, and an open questions session [13] on Reddit), funding
management, and work with trusted organisations.
11: https://lists.debian.org/debian-devel-announce/2015/07/msg00002.html
12: http://www.mylinuxrig.com/post/122864405658/the-linux-setup-neil-mcgovern-debian-project
13: http://redd.it/3ctb6n
Help rescuing Debian Live Rescue
--------------------------------
Ben Armstrong sent [14] a second call for help to revive the rescue
flavour of the Debian Live image, which missed the Debian Jessie
release, with a list of tasks to achieve. If you are interested in
helping with the Debian Live rescue image, contact the #debian-live IRC
channel on irc.debian.org, or send an email to Debian Live mailing
list [15].
14: http://syn.theti.ca/2015/06/23/debian-live-rescue-needs-some-love/
15: https://lists.debian.org/debian-live/
Debian switches to FFmpeg for multimedia packages
-------------------------------------------------
For the Wheezy release, the Debian project moved from having FFmpeg [16]
as the provider of multimedia libraries to Libav [17], which is also in
use in the Jessie release. The Debian Multimedia team announced [18]
that after a careful review [19], they have decided to switch back to
FFmpeg, and will do their best to finish the transition for the next
stable release, Debian Stretch.
16: https://ffmpeg.org/
17: https://libav.org/
18: https://lists.debian.org/debian-devel-announce/2015/07/msg00001.html
19: https://wiki.debian.org/Debate/libav-provider/ffmpeg
Reproducible builds funded by the Linux Foundation
--------------------------------------------------
The Linux Fundation's Core Infrastructure Initiative [20] announced
that they will support [21, 22] two Debian Developers, Holger Levsen and
Jérémy Bobbio, with $200,000 to advance their Debian work on
reproducible builds [23] and to collaborate more closely with other
distributions such as Fedora, Ubuntu, and OpenWrt to benefit from this
effort.
In the meantime, Jérémy Bobbio published [24] several [25] issues [26]
of his weekly [27] report [28] from the Debian reproducible builds
effort: since the last issue of the Debian Project News, about 500
packages have become reproducible.
20: https://www.coreinfrastructure.org/
21: http://www.linuxfoundation.org/news-media/announcements/2015/06/linux-foundation-s-core-infrastructure-initiative-funds-three-new
22: https://bits.debian.org/2015/06/reproducible-builds-funded-by-cii.html
23: https://wiki.debian.org/ReproducibleBuilds
24: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_7/
25: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_8/
26: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_9/
27: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_10/
28: https://people.debian.org/~lunar/blog/posts/reproducible_builds_stretch_week_11/
Transition to GCC5 and libstdc++6
---------------------------------
Matthias Klose sent a message [29] about the transition to GCC5 and
libstdc++6, scheduled for the end of the month. Bugs were filed for
packages failing to build from source [30] with the new GCC version, and
for those where investigation is needed [31], to see if the transition
to the new libstdc++ affects them. Details of the transition can be
found on the dedicated Debian wiki page [32].
29: https://lists.debian.org/debian-devel-announce/2015/07/msg00000.html
30: https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ftbfs-gcc-5;users=debian-gcc@xxxxxxxxxxxxxxxx
31: https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=libstdc%2B%2B-cxx11;users=debian-gcc@xxxxxxxxxxxxxxxx
32: https://wiki.debian.org/GCC5
Report from Google Summer of Code students
------------------------------------------
Yuru Roy Shao, mentored by Ritesh Raj Sarraf [33], is working on Apport
integration in Debian. Yuru posted a report [34] on the new features he
implemented: uniqueness of the apport-notifyd notification daemon
instance, installation of debug symbols, use of the system APT cache to
avoid downloading packages twice, and Debian BTS integration. Orestis
Ioannou also sent an update [35] on the work he has done on a new web
application, the copyright tracker, as part of the Debsources project.
33: http://www.researchut.com/blog/gsoc-apport-for-debian
34: http://blog.yurushao.info/2015/07/Debian-Apport-GSoC/
35: http://oioannou.com/2015/blog/gsoc-updates/
Long Term Support reports
-------------------------
Guido Günther [36], Thorsten Alteholz [37], Mike Gabriel [38], and Ben
Hutchings [39] published their activities in Debian on their blogs, with
a special emphasis on their work on Squeeze Long Term Support [40].
36: http://honk.sigxcpu.org/con/Debian_work_in_June_2015.html
37: http://blog.alteholz.eu/2015/07/my-debian-activities-in-june-2015/
38: http://sunweavers.net/blog/node/16
39: http://womble.decadent.org.uk/blog/debian-lts-work-june-2015.html
40: https://wiki.debian.org/LTS
Tips and Tricks
---------------
Several members of the Debian community shared some tips: Thomasz
Buchert explained [41] how to tag emails which haven't been replied to,
using notmuch [42]. Simon Josefsson explained [43] how to deal with SSH
Host Certificates with a YubiKey NEO. Julien Danjou published [44] on
his blog an article on the need to always consider timezone information
with any timestamp, and how to do that in Python. Sandro Tosi
explained [45] how to tweak the configuration of CFEngine [46] for
package upgrades, to deal with epochs [47] in Debian versions. Michael
Prokop noticed [48] on his blog that HAProxy causes random "Hash Sum
mismatch" errors with Debian Squeeze clients. A solution to this issue
was proposed in a comment by Petter Reinholdtsen.
41: https://tomasz.buchert.pl/blog/2015/06/14/notmuch-response
42: https://packages.debian.org/sid/notmuch
43: http://blog.josefsson.org/2015/06/16/ssh-host-certificates-with-yubikey-neo/
44: https://julien.danjou.info/blog/2015/python-and-timezones
45: http://sandrotosi.blogspot.com.au/2015/06/cfengine-upgrade-debian-packages.html
46: https://packages.debian.org/sid/cfengine3
47: https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Version
48: http://michael-prokop.at/blog/2015/07/02/haproxy-with-debiansqueeze-clients-causing-random-hash-sum-mismatch/
Other news
----------
The 39th issue of the miscellaneous news for developers [49] has been
released and covers the following topics:
* Android Tools Team
* Google Code closing
* uscan redirector pypi.debian.net
* Derivatives census update
* oldoldstable on DDPO
49: https://lists.debian.org/debian-devel-announce/2015/06/msg00002.html
Martin Michlmayr announced [50] that support for the D-Link DNS-323 and
Conceptronic CH3SNAS has been removed in Debian Stretch, because the
kernel is now too large to fit into the flash on these devices.
50: https://lists.debian.org/20150615204618.GA23765@xxxxxxxxxxxxxxxxx
The technical committee [51] published their decision [52] about the
maintainership of the aptitude package [53].
51: https://www.debian.org/News/weekly/2015/06/$HOME/devel/tech-ctte
52: https://lists.debian.org/debian-devel-announce/2015/06/msg00004.html
53: https://packages.debian.org/sid/aptitude
Niels Thykier sent an update [54] on the status of automatically
generated debug packages [55], with a summary of the missing pieces,
hints on how people can help to improve the situation, and some answers
to frequently asked questions.
54: https://lists.debian.org/debian-dpkg/2015/06/msg00018.html
55: https://wiki.debian.org/AutomaticDebugPackages
He also introduced in his blog [56] a new tool he created with the FTP
masters for dak, the Debian Archive Kit. The purpose of the "auto-
decrufter" is to identify common types of cruft (such as binary packages
no longer built from any source package), and automatically remove them
from unstable when nothing Depends or Build-Depends on them. Until
recently that removal has been 100% manual and done by the FTP masters.
56: https://nthykier.wordpress.com/2015/06/22/introducing-dak-auto-decruft/
"Pirate" Praveen Arimbrathodiyil successfully managed to get a crowd-
funding campaign to work full time for a month on the Debian packaging
for the Diaspora [57] social network. He sent [58] a report explaining
the different tasks he carried out, including packaging 23 dependencies
and updating 34 existing packages.
57: https://diasporafoundation.org/
58: https://lists.debian.org/debian-devel/2015/07/msg00277.html
New Debian Contributors
-----------------------
4 applicants have been accepted [59] as Debian Developers, and 23 people
have started to maintain packages [60] since the previous issue of the
Debian Project News. Please welcome Diane Trout, Thomas Vincent,
Chrysostomos Nanakos, Markus Wanner, Zhou Mo, Ilias Tsitsimpis, Daniel
Dehennin, Marcel Fourné, Corey Bryant, Bertrand Neron, Thomas Calderon,
Giovani Augusto Ferreira, Afif Elghraoui, Komal Dsukhani, Chris West,
Senthil Kumaran S, Syam G Krishnan, Azat Khuzhin, Axel Burri, Larissa
Reis, Sebastian Wouters, Gunter Königsmann, Dimitris Kalamaras, Orestis
Ioannou, Sergio Durigan Junior, Roelof Berg, and Lucas de Castro Borges,
into our project!
59: https://nm.debian.org/public/nmlist#done
60: https://udd.debian.org/cgi-bin/new-maintainers.cgi
Important Debian Security Advisories
------------------------------------
Debian's Security Team recently released advisories for these packages
(among others): qemu [61], qemu-kvm [62], xen [63], openssl [64],
libav [65], p7zip [66], linux [67], drupal7 [68], cinder [69],
pyjwt [70], wireshark [71], cacti [72], libcrypto++ [73],
unattended-upgrades [74], jackrabbit [75], stunnel4 [76],
icewease [77], haproxy [78], libwmf [79], cups-filter [80], bind9 [81],
python-django [82], pdns [83], pdns-recursor [84], and mysql-5.5 [85].
Please read them carefully and take the proper measures.
61: https://www.debian.org/security/2015/dsa-3284
62: https://www.debian.org/security/2015/dsa-3285
63: https://www.debian.org/security/2015/dsa-3286
64: https://www.debian.org/security/2015/dsa-3287
65: https://www.debian.org/security/2015/dsa-3288
66: https://www.debian.org/security/2015/dsa-3289
67: https://www.debian.org/security/2015/dsa-3290
68: https://www.debian.org/security/2015/dsa-3291
69: https://www.debian.org/security/2015/dsa-3292
70: https://www.debian.org/security/2015/dsa-3293
71: https://www.debian.org/security/2015/dsa-3294
72: https://www.debian.org/security/2015/dsa-3295
73: https://www.debian.org/security/2015/dsa-3296
74: https://www.debian.org/security/2015/dsa-3297
75: https://www.debian.org/security/2015/dsa-3298
76: https://www.debian.org/security/2015/dsa-3299
77: https://www.debian.org/security/2015/dsa-3300
78: https://www.debian.org/security/2015/dsa-3301
79: https://www.debian.org/security/2015/dsa-3302
80: https://www.debian.org/security/2015/dsa-3303
81: https://www.debian.org/security/2015/dsa-3304
82: https://www.debian.org/security/2015/dsa-3305
83: https://www.debian.org/security/2015/dsa-3306
84: https://www.debian.org/security/2015/dsa-3307
85: https://www.debian.org/security/2015/dsa-3308
The Debian team in charge of Squeeze Long Term Support released security
update announcements for these packages: p7zip [86], linux-2.6 [87],
linux-2.6 [88], openssl [89], qemu [90], qemu-kvm [91],
libclamunrar [92], zendframework [93], postgresql-8.4 [94],
zendframework [95], libwmf [96], librack-ruby [97], cacti [98],
t1utils [99], libwmf [100], jqueryui [101], shibboleth-sp2 [102],
hostapd [103], aptdaemon [104], libcrypto++ [105], ruby1.9.1 [106],
libmodule-signature-perl [107], unattended-upgrades [108],
pykerberos [109], libxml2 [110], aptdaemon [111], virtualbox-ose [112],
linux-ftpd-ssl [113], bind9 [114], libunwind [115], and
python-django [116]. Please read them carefully and take the proper measures.
86: https://lists.debian.org/debian-lts-announce/2015/06/msg00010.html
87: https://lists.debian.org/debian-lts-announce/2015/06/msg00011.html
88: https://lists.debian.org/debian-lts-announce/2015/06/msg00012.html
89: https://lists.debian.org/debian-lts-announce/2015/06/msg00013.html
90: https://lists.debian.org/debian-lts-announce/2015/06/msg00014.html
91: https://lists.debian.org/debian-lts-announce/2015/06/msg00015.html
92: https://lists.debian.org/debian-lts-announce/2015/06/msg00016.html
93: https://lists.debian.org/debian-lts-announce/2015/06/msg00017.html
94: https://lists.debian.org/debian-lts-announce/2015/06/msg00018.html
95: https://lists.debian.org/debian-lts-announce/2015/06/msg00019.html
96: https://lists.debian.org/debian-lts-announce/2015/06/msg00020.html
97: https://lists.debian.org/debian-lts-announce/2015/06/msg00021.html
98: https://lists.debian.org/debian-lts-announce/2015/06/msg00022.html
99: https://lists.debian.org/debian-lts-announce/2015/06/msg00023.html
100: https://lists.debian.org/debian-lts-announce/2015/06/msg00024.html
101: https://lists.debian.org/debian-lts-announce/2015/06/msg00025.html
102: https://lists.debian.org/debian-lts-announce/2015/06/msg00026.html
103: https://lists.debian.org/debian-lts-announce/2015/06/msg00027.html
104: https://lists.debian.org/debian-lts-announce/2015/06/msg00028.html
105: https://lists.debian.org/debian-lts-announce/2015/06/msg00029.html
106: https://lists.debian.org/debian-lts-announce/2015/07/msg00000.html
107: https://lists.debian.org/debian-lts-announce/2015/07/msg00001.html
108: https://lists.debian.org/debian-lts-announce/2015/07/msg00002.html
109: https://lists.debian.org/debian-lts-announce/2015/07/msg00003.html
110: https://lists.debian.org/debian-lts-announce/2015/07/msg00004.html
111: https://lists.debian.org/debian-lts-announce/2015/07/msg00005.html
112: https://lists.debian.org/debian-lts-announce/2015/07/msg00006.html
113: https://lists.debian.org/debian-lts-announce/2015/07/msg00007.html
114: https://lists.debian.org/debian-lts-announce/2015/07/msg00008.html
115: https://lists.debian.org/debian-lts-announce/2015/07/msg00009.html
116: https://lists.debian.org/debian-lts-announce/2015/07/msg00010.html
Debian's Stable Release Team released update announcements for these
packages: clamav [117], open-vm-tools [118], tzdata [119], and
libdatetime-timezone-perl [120]. Please read them carefully and take the
proper measures.
117: https://lists.debian.org/debian-stable-announce/2015/05/msg00000.html
118: https://lists.debian.org/debian-stable-announce/2015/05/msg00001.html
119: https://lists.debian.org/debian-stable-announce/2015/06/msg00001.html
120: https://lists.debian.org/debian-stable-announce/2015/06/msg00002.html
Please note that these are a selection of the more important security
advisories of the last weeks. If you need to be kept up to date about
security advisories released by the Debian Security Team, please
subscribe to the security mailing list [121] (and the separate backports
list [122], and stable updates list [123]) for announcements.
121: https://lists.debian.org/debian-security-announce/
122: https://lists.debian.org/debian-backports-announce/
123: https://lists.debian.org/debian-stable-announce/
New and noteworthy packages
---------------------------
1633 packages were added to the unstable Debian archive recently. Among
many others [124] are:
* blkreplay — block device testing and benchmarking toolkit [125]
* boomaga — virtual printer for viewing a document before printing [126]
* btrbk — backup tool for btrfs volumes [127]
* edid-decode — tool decoding to text the binary EDID information from monitors [128]
* elixir — dynamic, functional language on top of the Erlang VM [129]
* firejail — sandbox to restrict the application environment [130]
* iep — Interactive Editor for Python (Python 3) [131]
* lizardfs-master — distributed fault-tolerant file system resilient to data corruption [132]
* mmdb-bin — IP geolocation lookup command-line tool [133]
* muon — package manager for KDE [134]
* notmuch-addrlookup — address lookup tool for Notmuch [135]
* osmcoastline — tool to extract coastline data from OpenStreetMap planet file [136]
* sddm — modern display manager for X11 [137]
* trocla — tool to generate and store passwords and certificates on a central server [138]
* zulucrypt-cli — tool to encrypt volumes [139]
124: https://packages.debian.org/unstable/main/newpkg
125: https://packages.debian.org/unstable/main/blkreplay
126: https://packages.debian.org/unstable/main/boomaga
127: https://packages.debian.org/unstable/main/btrbk
128: https://packages.debian.org/unstable/main/edid-decode
129: https://packages.debian.org/unstable/main/elixir
130: https://packages.debian.org/unstable/main/firejail
131: https://packages.debian.org/unstable/main/iep
132: https://packages.debian.org/unstable/main/lizardfs-master
133: https://packages.debian.org/unstable/main/mmdb-bin
134: https://packages.debian.org/unstable/main/muon
135: https://packages.debian.org/unstable/main/notmuch-addrlookup
136: https://packages.debian.org/unstable/main/osmcoastline
137: https://packages.debian.org/unstable/main/sddm
138: https://packages.debian.org/unstable/main/trocla
139: https://packages.debian.org/unstable/main/zulucrypt-cli
Work-needing packages
---------------------
Currently [140] 673 packages are orphaned [141] and 176 packages are up
for adoption [142]: please visit the complete list of packages which
need your help [143].
140: https://lists.debian.org/debian-devel/2015/07/msg00125.html
141: https://www.debian.org/devel/wnpp/orphaned
142: https://www.debian.org/devel/wnpp/rfa
143: https://www.debian.org/devel/wnpp/help_requested
Want to continue reading DPN?
-----------------------------
Please help us create this newsletter. We still need more volunteer
writers to watch the Debian community and report about what is going on.
Please see the contributing page [144] to find out how to help. We're
looking forward to receiving your mail at
<debian-publicity@xxxxxxxxxxxxxxxx>.
144: https://wiki.debian.org/ProjectNews/HowToContribute
This issue of Debian Project News was edited by Cédric Boutillier, Jean-
Pierre Giraud, Donald Norwood, Justin B Rye, Paul Wise and Alex Muntada.
--