Debian Project News - January 6th, 2014

--qMm9M+Fa2AknHoGS
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


------------------------------------------------------------------------
The Debian Project                                http://www.debian.org/
Debian Project News                    [email protected]
January 6th, 2014             http://www.debian.org/News/weekly/2014/01/
------------------------------------------------------------------------

Welcome to this year's first issue of DPN, the newsletter for the Debian
community. Topics covered in this issue include:

  * SteamOS, a game oriented Debian derivative
  * Mini-DebConf in Phnom Penh
  * Mini-DebConf in Barcelona
  * Greens/EFA Group in the European Parliament to use Debian for email enc=
ryption
  * An automatic list of Debian contributors
  * Bits from the DPL
  * Bits from the Release Team
  * Interviews
  * Other news
  * Upcoming events
  * New Debian Contributors
  * Release-Critical bugs statistics for the upcoming release
  * Important Debian Security Advisories
  * New and noteworthy packages
  * Work-needing packages
  * Want to continue reading DPN?


SteamOS, a game oriented Debian derivative
------------------------------------------

Valve Software=C2=A0[1] has made available images for SteamOS=C2=A0[2], a D=
ebian
derivative aimed at providing a gaming experience built for the big
screen. This gaming operating system is based on Debian 7 (codename
"Wheezy"). Installation instructions are available from the the SteamOs
website=C2=A0[3]. A dedicated page in the Debian wiki=C2=A0[4] lists additi=
onal
information about this Debian derivative.

    1: http://www.valvesoftware.com
    2: http://store.steampowered.com/livingroom/SteamOS/
    3: http://store.steampowered.com/steamos/buildyourown
    4: https://wiki.debian.org/Derivatives/Census/SteamOS


Mini-DebConf in Phnom Penh
--------------------------

FOSSASIA=C2=A0[5] is inviting Debian contributors and fans to Phnom Penh,
Cambodia for a Mini-DebConf from February 28 to March 2, 2014. After
previous events in Vietnam and a successful Mini-DebConf 2010=C2=A0[6] in
Ho=C2=A0Chi=C2=A0Minh City it is time to bring together some of the awesome
Debian folks in the region again and organise another Mini-DebConf:
Phnom Penh 2014. The event will be held at Norton University, the
leading IT institution in Cambodia, and will bring together a number
of free software projects. Please join us, add your name to the
wiki=C2=A0[7], and spread the word!

    5: http://fossasia.org
    6: http://wiki.debian.org/DebianVietnam/MiniDebConf2010
    7: http://wiki.debian.org/DebianCambodia/MiniDebConf2014


Mini-DebConf in Barcelona
-------------------------

Debian Women=C2=A0[8] is proud to announce=C2=A0[9] that a Mini-DebConf=C2=
=A0[10] will
be organised in Barcelona on 15-16 March 2014. The idea behind the
conference is not to talk about women in free software, or women in
Debian, but Debian subjects more inclusive for women. Everybody is
invited, but speakers are expected to be all people identifying
themselves as women. Conference organisers are seeking proposals for
papers, presentations, discussion sessions, and tutorials. If you have
one or more proposals, send them to
<[email protected]>.

    8: http://www.debian.org/women
    9: http://lists.debian.org/debian-events-eu/2013/12/msg00011.html
   10: http://wiki.debian.org/DebianWomen/Projects/MiniDebconf-Women/2014


Greens/EFA Group in the European Parliament to use Debian for email encrypt=
ion
---------------------------------------------------------------------------=
---

Rebecca Harms=C2=A0[11], co-president of the Greens/EFA Group in the Europe=
an
Parliament, announced a project to use trustworthy encryption=C2=A0[12] in
cooperation and dialogue with European Parliament IT services and
Debian. Recognising that we "live in a digital environment polluted by
pervasive surveillance", she sees encrypted software as a small first
step to ensure nobody but the intended recipent of an email can read it.
Greens/EFA will use a selection of Free Software from Debian running on
regular consumer laptops. "As Greens in the European Parliament we are
very pleased that we are supported by Debian [...], a community of
programmers and developers abiding to a social contract=C2=A0[13] to share
and maintain their common resource which they call Free Software", she
said.

   11: http://www.rebecca-harms.de/index.php/lesen/trustworthy-encryption-a=
-small-step-to-stop-the-pollution--32935
   12: http://www.greens-efa.eu/software-procurement-11372.html
   13: http://www.debian.org/social_contract


An automatic list of Debian contributors
----------------------------------------

Enrico Zini announced=C2=A0[14] that a list of known Debian contributors is
available at http://contributors.debian.org/. "The list will never be
fully comprehensive, but it will try to be the best effort Debian can
possibly make to credit everyone", Enrico said. The list is created from
data sources=C2=A0[15] which can be added to take into account new types of
contributions. Please refer to Enrico's message for implementation
details.

   14: http://lists.debian.org/debian-devel-announce/2013/12/msg00009.html
   15: http://contributors.debian.org/sources/


Bits from the DPL
-----------------

Lucas Nussbaum sent his monthly report of DPL activities for November
2013=C2=A0[16]. Among other topics, Lucas gave an update on the participati=
on
of Debian in the Outreach Program for Women=C2=A0[17]. He also started a
discussion=C2=A0[18] about the role of release goals, and a proposal to
replace them with procedures built on the existing recommended practices
for mass bug filings.

   16: http://lists.debian.org/debian-devel-announce/2013/12/msg00003.html
   17: http://gnome.org/opw/
   18: http://lists.debian.org/debian-devel/2013/11/msg00455.html

Lucas also recently updated delegations for the Policy Editors=C2=A0[19], t=
he
Debian Keyring Maintainers=C2=A0[20], the Debian Account Managers=C2=A0[21]=
, the
Press Team=C2=A0[22], and the Debian System Administrators=C2=A0[23]. He al=
so
officialised the existence and the powers of the Release Team by
publishing the first delegation=C2=A0[24] for this team.

   19: http://lists.debian.org/debian-devel-announce/2013/12/msg00004.html
   20: http://lists.debian.org/debian-devel-announce/2013/12/msg00005.html
   21: http://lists.debian.org/debian-devel-announce/2013/12/msg00006.html
   22: http://lists.debian.org/debian-devel-announce/2014/01/msg00000.html
   23: http://lists.debian.org/debian-devel-announce/2014/01/msg00001.html
   24: http://lists.debian.org/debian-devel-announce/2013/12/msg00007.html


Bits from the Release Team
--------------------------

Niels Thykier sent some bits from the Release Time=C2=A0[25], with a precise
timeline of events that need to happen before the freeze for the next
stable Debian release, Jessie, which is scheduled for November 5 2014.
He also mentioned that the results from piuparts=C2=A0[26], a tool to test
installation, upgrade and removal of Debian packages, are now integrated
into Britney, the software taking care of the migration of packages from
unstable to testing.

   25: http://lists.debian.org/debian-devel-announce/2013/12/msg00008.html
   26: http://piuparts.debian.org/


Interviews
----------

There have been DebianEdu interviews=C2=A0[27] with Dominik George=C2=A0[28=
] and
Klaus Knopper=C2=A0[29], who both describe, among other things, how they got
involved in Debian Edu and their views about it.

   27: http://people.skolelinux.org/pere/blog/tags/intervju/
   28: http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Dominik=
_George.html
   29: http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Klaus_K=
nopper.html


Other news
----------

The third update of the stable distribution of Debian
(codename "Wheezy") was released on December 14=C2=A0[30].

   30: http://www.debian.org/News/2013/20131214

Jakub Wilk posted on his blog=C2=A0[31] a one-liner script, named =CE=BCdpu=
t, to
efficiently replace dput or dput-ng for package uploading on a flaky
network connection.

   31: http://jwilk.net/blog/20131225-udput

Martin Zobel-Helas sent minutes of the DSA Team Meeting=C2=A0[32], held on
December 13, 2013.

   32: http://lists.debian.org/debian-project/2014/01/msg00003.html

The update for Wheezy of the Debian Administrator's handbook=C2=A0[33],
prefaced by Lucas Nussbaum, the current Debian Project Leader, and
Stefano Zacchiroli, Debian Project Leader from 2010 to 2013, is
available=C2=A0[34] for download from the website of the book, or as the
debian-handbook=C2=A0[35] on Debian systems running unstable.

   33: http://debian-handbook.info/
   34: http://debian-handbook.info/2013/major-update-of-the-debian-administ=
rators-handbook-for-debian-7-wheezy/
   35: http://packages.debian.org/source/sid/debian-handbook

Niels Thykier announced=C2=A0[36] that he has automated the reprocessing of
packages in the Debian archive when there is a new version of
Lintian=C2=A0[37], a tool to find bugs and policy violations in packages.
Reprocessing the whole Debian archive with Lintian 2.5.20 is expected to
take about 3 to 4 weeks.

   36: http://nthykier.wordpress.com/2013/12/23/automated-reprocessing-of-p=
ackages-on-lintian-debian-org/
   37: http://lintian.debian.org/


Upcoming events
---------------

There is one upcoming Debian-related event:

  * January 18-19, Paris, France =E2=80=94 Paris Mini-DebConf=C2=A0[38] in =
Telecom ParisTech=C2=A0[39]

   38: https://wiki.debconf.org/wiki/Miniconf-Paris/2014
   39: http://www.telecom-paristech.fr/eng/practical-information/getting-th=
ere.html#c2489

You can find more information about Debian-related events and talks on
the events section=C2=A0[40] of the Debian wiki, or subscribe to one of our
events mailing lists for different regions: Europe=C2=A0[41],
Netherlands=C2=A0[42], Hispanic America=C2=A0[43], North America=C2=A0[44].

   40: http://wiki.debian.org/DebianEvents
   41: http://lists.debian.org/debian-events-eu
   42: http://lists.debian.org/debian-events-nl
   43: http://lists.debian.org/debian-events-ha
   44: http://lists.debian.org/debian-events-na

Do you want to organise a Debian booth or a Debian install party? Are
you aware of other upcoming Debian-related events? Have you delivered a
Debian talk that you want to link on our talks page=C2=A0[45]? Send an email
to the Debian Events Team=C2=A0[46].

   45: http://www.debian.org/events/talks
   46: [email protected]


New Debian Contributors
-----------------------

Four applicants have been accepted=C2=A0[47] as Debian Developers,
eight applicants have been=C2=A0[48] accepted=C2=A0[49] as Debian Maintaine=
rs,
and twenty-five people have started to maintain packages=C2=A0[50] since
the previous issue of the Debian Project News. Please welcome
Thomas Bechtold, Miguel Landaeta, Andrea Colangelo, Mike Miller,
Michael Fladischer, Axel Wagner, Chris Boot, ChangZhuo Chen (=E9=99=B3=E6=
=98=8C=E5=80=AC),
Dima Kogan, Elmar Heeb, Hendrik Tews, Jakob Haufe, Radu-Bogdan Croitoru,
Walter Reiner, Ghislain Vaillant, Antonio Ospite, Ben Carrillo, Stewart
Smith, Sergio Schvezov, Otto Kek=C3=A4l=C3=A4inen, Mechtilde Stehmann,
Sebastien Badia, Christian Stalp, Mitsuya Shibata, Bret Curtis,
Alexandre Gramfort, Zev Benjamin, Folkert van Heusden, Julien Muchembled,
Noriyuki Ohkawa, Silvio Rhatto, Zygmunt Krynicki, Benjamin Eikel,
Lennart C. Karssen, Simon John, Mats Sj=C3=B6berg, and Christos Trochalakis
into our project!

   47: https://nm.debian.org/public/nmlist#done
   48: http://lists.debian.org/debian-project/2013/12/msg00013.html
   49: http://lists.debian.org//debian-project/2013/12/msg00093.html
   50: http://udd.debian.org/cgi-bin/new-maintainers.cgi


Release-Critical bugs statistics for the upcoming release
---------------------------------------------------------

According to the Bugs Search interface of the Ultimate Debian
Database=C2=A0[51], the upcoming release, Debian "Jessie", is currently
affected by 476 Release-Critical bugs. Ignoring bugs which are easily
solved or on the way to being solved, roughly speaking, about 330
Release-Critical bugs remain to be solved for the release to happen.

   51: http://udd.debian.org/bugs.cgi

There are also more detailed statistics=C2=A0[52] as well as some hints on
how to interpret=C2=A0[53] these numbers.

   52: http://richardhartmann.de/blog/posts/2013/12/27-Debian_Release_Criti=
cal_Bug_report_for_Week_52/
   53: http://wiki.debian.org/ProjectNews/RC-Stats


Important Debian Security Advisories
------------------------------------

Debian's Security Team recently released advisories for these packages
(among others): openjpeg=C2=A0[54], ruby1.8=C2=A0[55], ruby1.9.1=C2=A0[56],=
 chromium-
browser=C2=A0[57], samba=C2=A0[58], gimp=C2=A0[59], varnish=C2=A0[60], muni=
n=C2=A0[61],
php5=C2=A0[62], libtar=C2=A0[63], mysql-5.5=C2=A0[64], iceape=C2=A0[65], ns=
pr=C2=A0[66],
gnupg=C2=A0[67], xorg-server=C2=A0[68], pixman=C2=A0[69], curl=C2=A0[70], w=
ireshark=C2=A0[71],
denyhosts=C2=A0[72], libcommons-fileupload-java=C2=A0[73], drupal6=C2=A0[74=
],
hplip=C2=A0[75], ruby-i18n=C2=A0[76], puppet=C2=A0[77], memcached=C2=A0[78]=
, openssl=C2=A0[79],
and typo3-src=C2=A0[80]. Please read them carefully and take the proper
measures.

   54: http://www.debian.org/security/2013/dsa-2808
   55: http://www.debian.org/security/2013/dsa-2809
   56: http://www.debian.org/security/2013/dsa-2810
   57: http://www.debian.org/security/2013/dsa-2811
   58: http://www.debian.org/security/2013/dsa-2812
   59: http://www.debian.org/security/2013/dsa-2813
   60: http://www.debian.org/security/2013/dsa-2814
   61: http://www.debian.org/security/2013/dsa-2815
   62: http://www.debian.org/security/2013/dsa-2816
   63: http://www.debian.org/security/2013/dsa-2817
   64: http://www.debian.org/security/2013/dsa-2818
   65: http://www.debian.org/security/2013/dsa-2819
   66: http://www.debian.org/security/2013/dsa-2820
   67: http://www.debian.org/security/2013/dsa-2821
   68: http://www.debian.org/security/2013/dsa-2822
   69: http://www.debian.org/security/2013/dsa-2823
   70: http://www.debian.org/security/2013/dsa-2824
   71: http://www.debian.org/security/2013/dsa-2825
   72: http://www.debian.org/security/2013/dsa-2826
   73: http://www.debian.org/security/2013/dsa-2827
   74: http://www.debian.org/security/2013/dsa-2828
   75: http://www.debian.org/security/2013/dsa-2829
   76: http://www.debian.org/security/2013/dsa-2830
   77: http://www.debian.org/security/2013/dsa-2831
   78: http://www.debian.org/security/2013/dsa-2832
   79: http://www.debian.org/security/2013/dsa-2833
   80: http://www.debian.org/security/2013/dsa-2834

Debian's Backports Team released advisories for these packages:
roundcube=C2=A0[81], strongswan=C2=A0[82], openssh=C2=A0[83], and nbd=C2=A0=
[84]. Please read
them carefully and take the proper measures.

   81: http://lists.debian.org/debian-backports-announce/2013/12/msg00000.h=
tml
   82: http://lists.debian.org/debian-backports-announce/2013/12/msg00001.h=
tml
   83: http://lists.debian.org/debian-backports-announce/2013/12/msg00002.h=
tml
   84: http://lists.debian.org//debian-backports-announce/2013/12/msg00003.=
html

Please note that these are a selection of the more important security
advisories of the last weeks. If you need to be kept up to date about
security advisories released by the Debian Security Team, please
subscribe to the security mailing list=C2=A0[85] (and the separate backports
list=C2=A0[86], and stable updates list=C2=A0[87]) for announcements.

   85: http://lists.debian.org/debian-security-announce/
   86: http://lists.debian.org/debian-backports-announce/
   87: http://lists.debian.org/debian-stable-announce/


New and noteworthy packages
---------------------------

670 packages were added to the unstable Debian archive recently. Among
many others=C2=A0[88] are:

  * automx =E2=80=94 tool providing account configuration data to mailclien=
ts=C2=A0[89]
  * bugs-everywhere =E2=80=94 distributed bug tracking system using VCS sto=
rage=C2=A0[90]
  * calligraactive =E2=80=94 tablet version of Calligra=C2=A0[91]
  * codespell =E2=80=94 find and fix common misspellings in text files=C2=
=A0[92]
  * crudini =E2=80=94 utility for manipulating ini files=C2=A0[93]
  * debmake =E2=80=94 helper script to make the Debian source package=C2=A0=
[94]
  * fssync =E2=80=94 file system synchronization tool (1-way, over SSH)=C2=
=A0[95]
  * geary =E2=80=94 lightweight email client designed for the GNOME desktop=
=C2=A0[96]
  * git-repair =E2=80=94 repair various forms of damage to git repositorie=
=C2=A0[97]
  * jshon =E2=80=94 command line tool to parse, read and create JSON=C2=A0[=
98]
  * keyringer =E2=80=94 distributed secret management using GnuPG and Git=
=C2=A0[99]
  * loook =E2=80=94 tool to search strings in ODF documents=C2=A0[100]
  * mariadb-server =E2=80=94 MariaDB database server=C2=A0[101]
  * pumpa =E2=80=94 simple desktop client for pump.io, the distributed soci=
al network=C2=A0[102]
  * vim-youcompleteme =E2=80=94 fast, as-you-type, fuzzy-search code comple=
tion engine for Vim=C2=A0[103]
  * vokoscreen =E2=80=94 easy to use screencast creator=C2=A0[104]
  * whiteboard =E2=80=94 simple collaborative text editor for the web=C2=A0=
[105]
  * x509-util =E2=80=94 utility for X.509 certificates and chains=C2=A0[106]
  * yara =E2=80=94 help to identify and classify malwares=C2=A0[107]
  * zmap =E2=80=94 network scanner for researchers=C2=A0[108]

   88: http://packages.debian.org/unstable/main/newpkg
   89: http://packages.debian.org/unstable/main/automx
   90: http://packages.debian.org/unstable/main/bugs-everywhere
   91: http://packages.debian.org/unstable/main/calligraactive
   92: http://packages.debian.org/unstable/main/codespell
   93: http://packages.debian.org/unstable/main/crudini
   94: http://packages.debian.org/unstable/main/debmake
   95: http://packages.debian.org/unstable/main/fssync
   96: http://packages.debian.org/unstable/main/geary
   97: http://packages.debian.org/unstable/main/git-repair
   98: http://packages.debian.org/unstable/main/jshon
   99: http://packages.debian.org/unstable/main/keyringer
  100: http://packages.debian.org/unstable/main/loook
  101: http://packages.debian.org/unstable/main/mariadb-server
  102: http://packages.debian.org/unstable/main/pumpa
  103: http://packages.debian.org/unstable/main/vim-youcompleteme
  104: http://packages.debian.org/unstable/main/vokoscreen
  105: http://packages.debian.org/unstable/main/whiteboard
  106: http://packages.debian.org/unstable/main/x509-util
  107: http://packages.debian.org/unstable/main/yara
  108: http://packages.debian.org/unstable/main/zmap


Work-needing packages
---------------------

Currently=C2=A0[109] 541 packages are orphaned=C2=A0[110] and 156 packages =
are up
for adoption=C2=A0[111]: please visit the complete list of packages which
need your help=C2=A0[112].

  109: http://lists.debian.org/debian-devel/debian-devel/2014/01/msg00033.h=
tml
  110: http://www.debian.org/devel/wnpp/orphaned
  111: http://www.debian.org/devel/wnpp/rfa
  112: http://www.debian.org/devel/wnpp/help_requested


Want to continue reading DPN?
-----------------------------

Please help us create this newsletter. We still need more volunteer
writers to watch the Debian community and report about what is going on.
Please see the contributing page=C2=A0[113] to find out how to help. We're
looking forward to receiving your mail at
<[email protected]>.

  113: http://wiki.debian.org/ProjectNews/HowToContribute


This issue of Debian Project News was edited by Mario Behling,
C=C3=A9dric Boutillier, Elizabeth Krumbach, Carl J Mannino and Justin B Rye.




--qMm9M+Fa2AknHoGS
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
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=zSDG
-----END PGP SIGNATURE-----

--qMm9M+Fa2AknHoGS--