------------------------------------------------------------------------ The Debian Project https://www.debian.org/ Debian Project News debian-public...@lists.debian.org March 12, 2015 https://www.debian.org/News/weekly/2015/02/ ------------------------------------------------------------------------
Welcome to this year's second issue of DPN, the newsletter for the Debian community. Topics covered in this issue include: * Reports * A delegation for the Trademark Team * Calls for help: Debian Partners Program * Debian Project Leader Elections 2015 * Events * Other news * DPN asks: DSA, what do you do? * Interviews * New Debian Contributors * Release-Critical bugs statistics for the upcoming release * Important Debian Security Advisories * New and noteworthy packages * Work-needing packages * Want to continue reading DPN? Reports ------- Andreas Tille posted the DebianMed Sprint report [1], detailing the fifth sprint collaboration between the DebianMed team, BioLinux, developers, and users. The event was a great showcase for the Blends concept which also attracted new team members. Several packages were uploaded and accepted immediately at the sprint, thanks to the ftpmaster team, which meant work could continue on chains of dependencies without interruption. More reports and information about the work by M. Crusoe on screed, S. Steinbiss on barrnap, Tim Booth on khmer, and other contributors is available on the DebianMed 2015 Sprint Wiki [2]. 1: https://lists.debian.org/debian-med/2015/02/msg00215.html 2: https://wiki.debian.org/Sprints/2015/DebianMed2015 Debian LTS work continues with Raphaël Hertzog working 14.5 hours on the project. His highlights include a helper script to generate emails to package maintainers. Michael Banck [3] worked under sponsorship to keep PostgreSQL [4] updated for LTS, Ben Hutchings [5] uploaded packages for cups and sudo, and Thorsten Alteholz worked 14.5 hours uploading new versions of php5, krb5, and e2fsprogs. 3: http://www.advogato.org/person/mbanck/diary.html?start=64 4: https://github.com/credativ/postgresql-lts/tree/REL8_4_LTS 5: http://womble.decadent.org.uk/blog/debian-lts-work-february-2015.html Raphaël Hertzog is reducing [6] his non-work related involvement in Debian. This is partially to change his focus and partially due to recognising he was being distracted inside the project with mailing lists, RSS feeds, etc. He has recently been working with a local political party and the handling of their digital infrastructure, and specifically voting software. 6: http://raphaelhertzog.com/2015/03/06/my-free-software-activities-in-february-2015/ Thorsten Alteholz [7] marked 154 packages for acceptance in his role as an FTP Assistant. He also gives his opinions on some emails about interpretations of upstream licenses. 7: http://blog.alteholz.eu/2015/03/my-debian-activities-in-february-2015/ A delegation for the Trademark Team ----------------------------------- We welcome the announcement [8] of an official delegation for the Trademark team. The team worked previously in an unofficial capacity as volunteers under the DPL and were responsible for Debian trademark requests and for reporting violations. Recently the team has completed the process of registering Debian's swirl [9] in the U.S. They are now moving forward to international marks. Although the team will still work closely with the Debian Project Leader and Software in the Public Interest, the delegation means the team now functions on its own in its responsibility for trademark use requests, new registrations, updates, and extensions of Debian trademarks. 8: https://lists.debian.org/debian-devel-announce/2015/02/msg00011.html 9: https://lists.debian.org/debian-devel-announce/2015/02/msg00010.html Calls for help: Debian Partners Program --------------------------------------- Lucas Nussbaum put out a call for help [10] for the Debian Partners [11] program which thanks and advertises organisations that support and help our project. The present team has not been able to keep up with recent requests and additions. Lucas is looking to build a small group in charge of the program that would be responsible for setting up contribution levels, maintaining records, and benchmarking the program. 10: https://lists.debian.org/debian-project/2015/02/msg00070.html 11: https://www.debian.org/partners/ Debian Project Leader Elections 2015 ------------------------------------ The call for nominations [12] has started for the next Debian Project Leader election. The DPL term starts on Friday 17 April 2015. Our Constitution [13] states the elections should begin six weeks before the post becomes vacant. The process allows interested developers to nominate themselves and announce their platforms [14] in the first week. This is followed with a three week period of the nominees campaigning for the office, after which the last two weeks are reserved for Debian Developers to cast their votes in the election. The process started on 4 March 2015. The nominees are: Mehdi Dogguy, Gergely Nagy, and Neil McGovern. 12: https://lists.debian.org/debian-vote/2015/03/msg00001.html 13: https://www.debian.org/devel/constitution#item-5 14: https://www.debian.org/vote/2015/platforms/ Events ------ The announcement has been made that registration is now open for DebConf15 [15], taking place in Heidelberg, Germany, from Saturday, August 15, 2015 through Sunday, August 22, 2015. Debconf15 will be preceded by one week of DebCamp, Sunday, August 9, 2015 through Friday, August 14, 2015. If you would like to attend DebConf15, please fill out the registration form [16]. The DebConf Organisation team is happy to announce that they can host team sprints and take care of any logistics for working space, food, and accommodation for said teams. Interested teams should contact them and plan on having their sprints take place during DebCamp, 10 - 14 August. This is a great opportunity for teams to attract other interested people, motivate contributors, and reach the larger Debian community. DebConf16 will take place in Cape Town, South Africa [17]. 15: http://debconf15.debconf.org/ 16: https://summit.debconf.org/debconf15/registration/ 17: https://wiki.debconf.org/wiki/DebConf16/Bids/Cape_Town Other news ---------- Stefano Zacchiroli pointed out [18] that Debian [19] now has an entry in the Internet Movie Database, thanks to the movie Citizenfour. Debian is given "Special Thanks" at the end of the film credits. 18: https://identi.ca/zack/note/uf5PfjXhR1S5JciVOXeuZQ 19: http://www.imdb.com/company/co0504449/ DPN asks: DSA, what do you do? ------------------------------ Debian [20] is a large and global community of a lot of small actors, projects, and teams. This month as part of a special feature we'd like to share with you something about a project or a team that is working in Debian that you may not be aware of. We reached out to the DSA team with the question: "What do you do?" Paul Wise responds: The Debian System Administration (DSA) team [21] is delegated to manage the infrastructure of the Debian project, including machines, core services and relationships with donors of equipment, services and hosting. In practice, a nine person team gets to work through a deluge of email, cron output, monitoring notifications, bouncing Debian member mail, hoster/vendor notifications, spam, weird mail, misdirected questions, hardware that fails to reboot, dying hardware, sick hardware, serial consoles, disk replacements, hardware donations, hardware purchasing, hardware sponsors, hosting sponsors, guest account requests, group member changes, inter-release compatibility issues, service admin prodding, security updates, inter-team co-ordination and much more. Our tools of the trade include Debian stable (and some backports), hardware capable of running amd64 VMs, entropy keys, ganeti, puppet, icinga, munin, ikiwiki, git, postgresql, apache, openldap, gnupg, openssh, bacula, ferm, sudo and a bunch of homegrown scripts. We are interested in automation, reliability, speed, privacy, security, resilience, longevity and try to balance these for the benefit of the Debian project, members, users, derivatives and the wider world. As we have a lot to deal with, we mostly leave the actual running of services to service admins but provide general guidance [22] as well as specific guidance on a case-by-case basis. Our most recent achievement was modifying the update-ca-certificates code [23] to allow for multiple X.509 certificate stores and adding puppet bits to ensure the 3 certificate stores we wanted are consistent between hosts. An ongoing project is to replace our current old LDAP web/mail frontend [24] with a new one based on Django. If anyone would like to help out, please take a look at and feel free to fix the various bugs that we have filed [25]. For more information or to contact the team, visit their web page: DSA Team [26]. 20: https://www.debian.org/ 21: https://wiki.debian.org/Teams/DSA 22: https://wiki.debian.org/ServicesHosting#Recommended_practices_for_Debian_services 23: https://lists.debian.org/debian-services-admin/2014/12/msg00000.html 24: https://wiki.debian.org/Teams/DSA/UserdirLdapRewrite 25: https://bugs.debian.org/cgi-bin/pkgreport.cgi?users=debian-ad...@lists.debian.org 26: https://www.debian.org/Teams/DSA Interviews ---------- Zlatan Todorić is conducting a series of interviews with FLOSS developers, starting with Joey Hess [27]. This interview touches on the life and lifestyle of one of the prime movers in the Free Software Community. Joey speaks about his life after Debian, programming, and living modestly. 27: https://zgrimshell.github.io/interviews-with-floss-developers-joey-hess/ Next in the series is an interview with Paul Wise [28], a constant source of information, member of DSA, and a member of our very own Publicity team. Paul shares some of his history, his thoughts on FLOSS, and the future. 28: https://zgrimshell.github.io/interviews-with-floss-developers-paul-wise/ New Debian Contributors ----------------------- 3 applicants have been accepted [29] as Debian Developers, 3 applicants have been accepted [30] as Debian Maintainers, and 4 people have started to maintain packages [31] since the previous issue of the Debian Project News. Please welcome Jonas Genannt, Tomasz Buchert, Federicco Ceratto, Nicolaus Rath, Balasankar C, Olof Johansson, Rebecca N. Palmer, Thomas Klute, Luca Boccassi, and Carlos Alberto Silombria Ibarra into our project! 29: https://nm.debian.org/public/nmlist#done 30: https://lists.debian.org/debian-project/2015/03/msg00006.html 31: https://udd.debian.org/cgi-bin/new-maintainers.cgi Release-Critical bugs statistics for the upcoming release --------------------------------------------------------- According to the Bugs Search interface of the Ultimate Debian Database [32], the upcoming release, Debian "Jessie", is currently affected by 112 Release-Critical bugs. Ignoring bugs which are easily solved or on the way to being solved, roughly speaking, about 67 Release-Critical bugs remain to be solved for the release to happen. There are also more detailed statistics [33] as well as some hints on how to interpret [34] these numbers. 32: https://udd.debian.org/bugs.cgi 33: http://richardhartmann.de/blog/posts/2015/03/06-Debian_Release_Critical_Bug_report_for_Week_10/ 34: https://wiki.debian.org/ProjectNews/RC-Stats Important Debian Security Advisories ------------------------------------ Debian's Security Team recently released advisories for these packages (among others): bind9 [35], libreoffice [36], typo3-src [37], xdg-utils [38], e2fsprogs [39], sudo [40], ruby-redcloth [41], eglibc [42], linux [43], samba [44], cups [45], libgtk2-perl [46], iceweasel [47], kfreebsd-9 [48], request-tracker4 [49], unace [50], icedove [51], and libarchive [52]. Please read them carefully and take the proper measures. 35: https://www.debian.org/security/2015/dsa-3162 36: https://www.debian.org/security/2015/dsa-3163 37: https://www.debian.org/security/2015/dsa-3164 38: https://www.debian.org/security/2015/dsa-3165 39: https://www.debian.org/security/2015/dsa-3166 40: https://www.debian.org/security/2015/dsa-3167 41: https://www.debian.org/security/2015/dsa-3168 42: https://www.debian.org/security/2015/dsa-3169 43: https://www.debian.org/security/2015/dsa-3170 44: https://www.debian.org/security/2015/dsa-3171 45: https://www.debian.org/security/2015/dsa-3172 46: https://www.debian.org/security/2015/dsa-3173 47: https://www.debian.org/security/2015/dsa-3174 48: https://www.debian.org/security/2015/dsa-3175 49: https://www.debian.org/security/2015/dsa-3176 50: https://www.debian.org/security/2015/dsa-3178 51: https://www.debian.org/security/2015/dsa-3179 52: https://www.debian.org/security/2015/dsa-3180 The Debian team in charge of Squeeze Long Term Support released security update announcements for these packages: e2fsprogs [53], nss [54], linux-2.6 [55], samba [56], openjdk-6 [57], request-tracker3.8 [58], cups [59], sudo [60], libgtk2-perl [61], e2fsprogs [62], bind9 [63], unace [64], and eglibc [65]. 53: https://lists.debian.org/debian-lts-announce/2015/02/msg00007.html 54: https://lists.debian.org/debian-lts-announce/2015/02/msg00008.html 55: https://lists.debian.org/debian-lts-announce/2015/02/msg00009.html 56: https://lists.debian.org/debian-lts-announce/2015/02/msg00010.html 57: https://lists.debian.org/debian-lts-announce/2015/02/msg00011.html 58: https://lists.debian.org/debian-lts-announce/2015/02/msg00012.html 59: https://lists.debian.org/debian-lts-announce/2015/02/msg00013.html 60: https://lists.debian.org/debian-lts-announce/2015/02/msg00014.html 61: https://lists.debian.org/debian-lts-announce/2015/02/msg00015.html 62: https://lists.debian.org/debian-lts-announce/2015/02/msg00016.html 63: https://lists.debian.org/debian-lts-announce/2015/03/msg00000.html 64: https://lists.debian.org/debian-lts-announce/2015/03/msg00001.html 65: https://lists.debian.org/debian-lts-announce/2015/03/msg00002.html Debian's Stable Release Team released an update announcement for the packages: spamassassin [66], policyd-weight [67], and clamav [68]. Please read it carefully and take the proper measures. 66: https://lists.debian.org/debian-stable-announce/2015/02/msg00002.html 67: https://lists.debian.org/debian-stable-announce/2015/02/msg00003.html 68: https://lists.debian.org/debian-stable-announce/2015/02/msg00004.html Please note that these are a selection of the more important security advisories of the last weeks. If you need to be kept up to date about security advisories released by the Debian Security Team, please subscribe to the security mailing list [69] (and the separate backports list [70], stable updates list [71], and long term support security updates list [72]) for announcements. 69: https://lists.debian.org/debian-security-announce/ 70: https://lists.debian.org/debian-backports-announce/ 71: https://lists.debian.org/debian-stable-announce/ 72: https://lists.debian.org/debian-lts-announce/ New and noteworthy packages --------------------------- 128 packages were added to the unstable Debian archive recently. Among many others [73] are: * fcoe-utils — Fibre Channel over Ethernet utilities [74] * pidgin-gnome-keyring — integration of pidgin (and libpurple) with the system keyring [75] * tlp — tool to save battery power on laptops [76] * diaspora-installer — distributed social networking service - installer [77] * homesick — keep your dotfiles (configs) in Git [78] * libdist-zilla-plugin-emailnotify-perl — dzil plugin to send an email on dist release [79] * node-rbush — high-performance 2D spatial index for rectangles [80] * python3-kmip — Key Management Interoperability Protocol - Python 3.x [81] * wmcube — spinning 3D object that shows the current CPU load [82] * libnet-route-perl — portable interface to the routing table [83] 73: https://packages.debian.org/unstable/main/newpkg 74: https://packages.debian.org/unstable/main/fcoe-utils 75: https://packages.debian.org/unstable/main/pidgin-gnome-keyring 76: https://packages.debian.org/unstable/main/tlp 77: https://packages.debian.org/unstable/main/diaspora-installer 78: https://packages.debian.org/unstable/main/homesick 79: https://packages.debian.org/unstable/main/libdist-zilla-plugin-emailnotify-perl 80: https://packages.debian.org/unstable/main/node-rbush 81: https://packages.debian.org/unstable/main/python3-kmip 82: https://packages.debian.org/unstable/main/wmcube 83: https://packages.debian.org/unstable/main/libnet-route-perl Work-needing packages --------------------- Currently [84] 664 packages are orphaned [85] and 146 packages are up for adoption [86]: please visit the complete list of packages which need your help [87]. 84: https://lists.debian.org/debian-devel/2015/03/msg00042.html 85: https://www.debian.org/devel/wnpp/orphaned 86: https://www.debian.org/devel/wnpp/rfa 87: https://www.debian.org/devel/wnpp/help_requested Want to continue reading DPN? ----------------------------- Please help us create this newsletter. We still need more volunteer writers to watch the Debian community and report about what is going on. Please see the contributing page [88] to find out how to help. We're looking forward to receiving your mail at <debian-public...@lists.debian.org>. 88: https://wiki.debian.org/ProjectNews/HowToContribute This issue of Debian Project News was edited by Cédric Boutillier, Jean- Pierre Giraud, Donald Norwood, Justin B Rye and and Paul Wise. -- To UNSUBSCRIBE, email to debian-news-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150312231417.GA30336@spin