Debian Project News - March 17th, 2014

--x+6KMIRAuhnl3hBn
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


------------------------------------------------------------------------
The Debian Project                                http://www.debian.org/
Debian Project News                    [email protected]
March 17th, 2013              http://www.debian.org/News/weekly/2014/05/
------------------------------------------------------------------------

Welcome to this year's fifth issue of DPN, the newsletter for the Debian
community. Topics covered in this issue include:

  * The Supercomputing and Visualization Center of Madrid provides a Debian=
 VPS service
  * DebConf, past and future
  * Upcoming votes in the Debian Project: DPL elections and a code of condu=
ct
  * Bits from the DPL
  * Bits from the Security Team
  * Other news
  * Upcoming events
  * New Debian Contributors
  * Important Debian Security Advisories
  * New and noteworthy packages
  * Work-needing packages
  * Want to continue reading DPN?


The Supercomputing and Visualization Center of Madrid provides a Debian VPS=
 service
---------------------------------------------------------------------------=
--------

The Supercomputing and Visualization Center of Madrid=C2=A0[1] (CeSViMa),
which is part of the Technical University of Madrid=C2=A0[2] and houses
Magerit=C2=A0[3], one of the most powerful supercomputers in Spain, has
chosen Debian as host and guest operating system for its new service of
Virtual Private Servers (VPS)=C2=A0[4], for the research community and
public.

    1: http://www.cesvima.upm.es
    2: http://www.upm.es/internacional
    3: http://en.wikipedia.org/wiki/Magerit
    4: http://www.cesvima.upm.es/services/virtualization


DebConf, past and future
------------------------

While the local DebConf team is well into the preparation of
DebConf14=C2=A0[5] which will take place in Portland, Oregon, USA during 23=
=E2=80=93
31 August 2014, the DebConf committee decided during their last meeting
that DebConf15, the 16th annual Debian Conference, will be hosted in
Germany=C2=A0[6]. Details about location and date will be announced in the
coming months. A dedicated mailing list=C2=A0[7] has been created for the
organisation and those interested are welcome to subscribe and join the
discussion.

Furthermore, the 32-page final report for DebConf13=C2=A0[8] in
Vaumarcus, Switzerland, is now available=C2=A0[9]. It provides interesting
facts about the organisation of the event and the experiences of
participants.

    5: http://debconf14.debconf.org/
    6: http://blog.debconf.org/blog/debconf15/rh_dc15-in-germany-dc13-final=
-report-20140309.dc
    7: http://lists.debian.org/debconf15-team/
    8: http://debconf13.debconf.org/
    9: http://media.debconf.org/dc13/report/DebConf13-final-report.en.pdf


Upcoming votes in the Debian Project: DPL elections and a code of conduct
-------------------------------------------------------------------------

Kurt Roeckx, Debian project secretary=C2=A0[10], opened=C2=A0[11] the proje=
ct
leader elections. This year, two candidates have nominated themselves:
Lucas Nussbaum=C2=A0[12], current DPL, and Neil McGovern=C2=A0[13]. During =
the
campaign candidates will answer questions on the debian-vote mailing
list=C2=A0[14] until March 30, after which Debian Members will have two wee=
ks
to send their votes.

Kurt also announced=C2=A0[15] that a general resolution has been started
about a code of conduct, initiated by Wouter Verhelst. The debate about
the text proposed can be followed on the debian-vote mailing list=C2=A0[16].
More information is available on the web page of this vote=C2=A0[17].

The Debian project uses the Condorcet method for its elections=C2=A0[18].

   10: http://www.debian.org/devel/secretary
   11: http://lists.debian.org/debian-devel-announce/2014/03/msg00000.html
   12: http://www.debian.org/vote/2014/platforms/lucas
   13: http://www.debian.org/vote/2014/platforms/neilm
   14: http://lists.debian.org/debian-vote
   15: http://lists.debian.org/debian-devel-announce/2014/03/msg00006.html
   16: http://lists.debian.org/debian-vote
   17: http://www.debian.org/vote/2014/vote_002
   18: http://www.debian.org/vote


Bits from the DPL
-----------------

Lucas Nussbaum sent his monthly report of DPL activities for the end of
January and February 2014=C2=A0[19]. Lucas mentioned the ongoing work by
Stefano Zacchiroli, the Software Freedom Conservancy=C2=A0[20] and SPI=C2=
=A0[21]
to offer Debian contributors the possibility to transfer the copyright
of their contributions to a "trusted" organisation. Lucas also forwarded
to Debian France=C2=A0[22], Debian.ch=C2=A0[23] and FFIS=C2=A0[24] the list=
 of
evaluation criteria=C2=A0[25] to become a trusted organisation, authorised =
to
accept and hold assets for Debian.

In another message=C2=A0[26], Lucas appointed Nicolas Dandrimont and
Sylvestre Ledru as admins for Debian participation in the Google Summer
of Code 2014.

   19: http://lists.debian.org/debian-devel-announce/2014/03/msg00001.html
   20: http://sfconservancy.org/
   21: http://www.spi-inc.org/
   22: http://france.debian.net/
   23: http://debian.ch/
   24: http://www.ffis.de/
   25: http://wiki.debian.org/Teams/DPL/TrustedOrganizationCriteria
   26: http://lists.debian.org/debian-devel-announce/2014/03/msg00002.html


Bits from the Security Team
---------------------------

Moritz Muehlenhoff sent some bits from the Security Team=C2=A0[27]. The
Security Team met on the first weekend of February at the Linux Hotel in
Essen. They discussed several improvements for the Debian security
tracker and the security release workflow, as well as changes in the
security archive, such as the possibility to allow maintainers not part
of the Security Team to release security updates on their own through a
mechanism similar to the procedure to grant upload privileges to Debian
Maintainers. Distribution hardening was also mentioned: currently, more
than 95% of security-sensitive packages and packages with priority
standard or above are hardened using dpkg-buildflags.

Last but not least, the Security Team considers that at the moment it
seems likely that an extended security support timespan for Squeeze is
possible. The plan is to go ahead, and provide updates for a "long term
support" for Squeeze in a separate suite where everyone in the Debian
keyring can upload in order to minimise bottlenecks and allow
contributions by all interested parties. The team needs help to make
this effort sustainable. Anyone interested in helping with an extended
security support is invited to contact the Security Team=C2=A0[28].

   27: http://lists.debian.org/debian-devel-announce/2014/03/msg00004.html
   28: [email protected]


Other news
----------

Stefano Zacchiroli blogged=C2=A0[29] about the how-can-i-help package=C2=A0=
[30]
and how useful it can be for Debian contributors searching for
opportunities to help the project.

   29: http://upsilon.cc/~zack/blog/posts/2014/02/apt-get_install_how-can-i=
-help/
   30: http://packages.debian.org/unstable/how-can-i-help

Bill Allombert and St=C3=A9phane Blondon have improved the website
popcon.debian.org=C2=A0[31], presenting the gathered results of Debian's
popularity contest=C2=A0[32]. In particular it now uses a style matching the
main Debian website=C2=A0[33].

   31: http://popcon.debian.org
   32: http://packages.debian.org/unstable/popularity-contest
   33: http://www.debian.org/

Enrico Zini announced=C2=A0[34] that the Debian Single SignOn=C2=A0[35] ser=
vice
can now use not only the credentials of official Debian Members, but
also those from Alioth=C2=A0[36], the Debian sourceforge. At the moment,
contributors with an Alioth account are able to log in to
contributors.debian.org=C2=A0[37] with their Alioth password, and have acce=
ss
to detailed information about their contributions. This will be extended
to other Debian web services in the future.

   34: http://lists.debian.org/debian-devel-announce/2014/03/msg00008.html
   35: http://sso.debian.org
   36: http://alioth.debian.org/
   37: http://contributors.debian.org

Gunnar Wolf announced=C2=A0[38] that the Debian keyring maintainers no long=
er
consider 1024 bit long DSA cryptographic keys to be trustable. They are
asking Debian Members and Maintainers still using this kind of key to
move to a stronger key (4096 bit RSA keys are recommended) as soon as
possible.

   38: http://lists.debian.org/debian-devel-announce/2014/03/msg00003.html


Upcoming events
---------------

There are several upcoming Debian-related events:

  * 22 March, Augsburg, Germany =E2=80=94 13th Augsburger Linux-Infotag=C2=
=A0[39]
  * 25-27 April, Salzburg, Austria =E2=80=94 Debian Bug Squashing Party=C2=
=A0[40] in
    the offices of conova communications GmbH=C2=A0[41]

   39: http://www.luga.de/Aktionen/LIT-2014
   40: http://wiki.debian.org/BSP/2014/04/at/Salzburg
   41: http://www.conova.com/de/kontakt/anfahrtsplan-salzburg/

You can find more information about Debian-related events and talks on
the events section=C2=A0[42] of the Debian web site, or subscribe to one of
our events mailing lists for different regions: Europe=C2=A0[43],
Netherlands=C2=A0[44], Hispanic America=C2=A0[45], North America=C2=A0[46].

   42: http://www.debian.org/events
   43: http://lists.debian.org/debian-events-eu
   44: http://lists.debian.org/debian-events-nl
   45: http://lists.debian.org/debian-events-ha
   46: http://lists.debian.org/debian-events-na

Do you want to organise a Debian booth or a Debian install party? Are
you aware of other upcoming Debian-related events? Have you delivered a
Debian talk that you want to link on our talks page=C2=A0[47]? Send an email
to the Debian Events Team=C2=A0[48].

   47: http://www.debian.org/events/talks
   48: [email protected]


New Debian Contributors
-----------------------

1 applicant has been accepted=C2=A0[49] as Debian Developer, 7 applicants
have been accepted=C2=A0[50] as Debian Maintainers, and 1 person has started
to maintain packages=C2=A0[51] since the previous issue of the Debian Proje=
ct
News. Please welcome IOhannes m zm=C3=B6lnig, Giulio Paci, Tobias Hamp, Klee
Dienes, Victor Seva, Oleg Moskalenko, Philip Rinn, Simon Kainz, and
Joseph Herlant into our project!

   49: https://nm.debian.org/public/nmlist#done
   50: http://lists.debian.org/debian-project/2014/03/msg00089.html
   51: http://udd.debian.org/cgi-bin/new-maintainers.cgi


Important Debian Security Advisories
------------------------------------

Debian's Security Team recently released advisories for these packages
(among others): php5=C2=A0[52], gnutls26=C2=A0[53], libyaml-libyaml-perl=C2=
=A0[54],
wireshark=C2=A0[55], udisks=C2=A0[56], file=C2=A0[57], mutt=C2=A0[58], cups=
-filters=C2=A0[59],
cups=C2=A0[60], lighttpd=C2=A0[61], virtualbox=C2=A0[62], and libssh=C2=A0[=
63]. Please read
them carefully and take the proper measures.

   52: http://www.debian.org/security/2013/dsa-2868
   53: http://www.debian.org/security/2013/dsa-2869
   54: http://www.debian.org/security/2013/dsa-2870
   55: http://www.debian.org/security/2013/dsa-2871
   56: http://www.debian.org/security/2013/dsa-2872
   57: http://www.debian.org/security/2013/dsa-2873
   58: http://www.debian.org/security/2013/dsa-2874
   59: http://www.debian.org/security/2013/dsa-2875
   60: http://www.debian.org/security/2013/dsa-2876
   61: http://www.debian.org/security/2013/dsa-2877
   62: http://www.debian.org/security/2013/dsa-2878
   63: http://www.debian.org/security/2013/dsa-2879

Debian's Backports Team released an advisory for the package
gnutls28=C2=A0[64]. Please read them carefully and take the proper measures.

   64: http://lists.debian.org/debian-backports-announce/2014/03/msg00000.h=
tml

Debian's Stable Release Team released update announcements for these
packages: debian-edu-archive-keyring=C2=A0[65] and clamav (for Squeeze=C2=
=A0[66]
and Wheezy=C2=A0[67]). Please read it carefully and take the proper measure=
s.

   65: http://lists.debian.org/debian-stable-announce/2014/03/msg00000.html
   66: http://lists.debian.org/debian-stable-announce/2014/03/msg00001.html
   67: http://lists.debian.org/debian-stable-announce/2014/03/msg00002.html

Please note that these are a selection of the more important security
advisories of the last weeks. If you need to be kept up to date about
security advisories released by the Debian Security Team, please
subscribe to the security mailing list=C2=A0[68] (and the separate backports
list=C2=A0[69], and stable updates list=C2=A0[70]) for announcements.

   68: http://lists.debian.org/debian-security-announce/
   69: http://lists.debian.org/debian-backports-announce/
   70: http://lists.debian.org/debian-stable-announce/


New and noteworthy packages
---------------------------

242 packages were added to the unstable Debian archive recently. Among
many others=C2=A0[71] are:

  * cbp2make =E2=80=94 Makefile generation tool for the Code::Blocks IDE=C2=
=A0[72]
  * charon-cmd =E2=80=94 standalone IPsec client=C2=A0[73]
  * dovecot-lucene =E2=80=94 secure POP3/IMAP server - Lucene support=C2=A0=
[74]
  * duck =E2=80=94 tool to check URLs in debian/control and debian/upstream=
 files=C2=A0[75]
  * gap-openmath =E2=80=94 OpenMath phrasebook for GAP=C2=A0[76]
  * libuhttpmock-0.0-0 =E2=80=94 HTTP web service mocking=C2=A0[77]
  * loganalyzer =E2=80=94 web interface to syslog and event data=C2=A0[78]
  * marco =E2=80=94 lightweight GTK+ window manager for MATE=C2=A0[79]
  * openssh-known-hosts =E2=80=94 download, filter and merge known_hosts fo=
r OpenSSH=C2=A0[80]
  * qjoypad =E2=80=94 program for mapping gamepad/joystick events to mouse/=
keyboard event=C2=A0[81]
  * runawk =E2=80=94 wrapper for AWK interpreter implementing modules=C2=A0=
[82]
  * salt-cloud =E2=80=94 public cloud VM management system=C2=A0[83]
  * svtplay-dl =E2=80=94 program to download videos from video on demand si=
tes=C2=A0[84]
  * xul-ext-torbirdy =E2=80=94 tool to configure and enhance various Mozill=
a birds for anonymity use=C2=A0[85]

   71: http://packages.debian.org/unstable/main/newpkg
   72: http://packages.debian.org/unstable/main/cbp2make
   73: http://packages.debian.org/unstable/main/charon-cmd
   74: http://packages.debian.org/unstable/main/dovecot-lucene
   75: http://packages.debian.org/unstable/main/duck
   76: http://packages.debian.org/unstable/main/gap-openmath
   77: http://packages.debian.org/unstable/main/libuhttpmock-0.0-0
   78: http://packages.debian.org/unstable/main/loganalyzer
   79: http://packages.debian.org/unstable/main/marco
   80: http://packages.debian.org/unstable/main/openssh-known-hosts
   81: http://packages.debian.org/unstable/main/qjoypad
   82: http://packages.debian.org/unstable/main/runawk
   83: http://packages.debian.org/unstable/main/salt-cloud
   84: http://packages.debian.org/unstable/main/svtplay-dl
   85: http://packages.debian.org/unstable/main/xul-ext-torbirdy


Work-needing packages
---------------------

Currently=C2=A0[86] 564 packages are orphaned=C2=A0[87] and 140 packages ar=
e up
for adoption=C2=A0[88]: please visit the complete list of packages which ne=
ed
your help=C2=A0[89].

   86: http://lists.debian.org/debian-devel/2014/03/msg00288.html
   87: http://www.debian.org/devel/wnpp/orphaned
   88: http://www.debian.org/devel/wnpp/rfa
   89: http://www.debian.org/devel/wnpp/help_requested


Want to continue reading DPN?
-----------------------------

Please help us create this newsletter. We still need more volunteer
writers to watch the Debian community and report about what is going on.
Please see the contributing page=C2=A0[90] to find out how to help. We're
looking forward to receiving your mail at
<[email protected]>.

   90: http://wiki.debian.org/ProjectNews/HowToContribute


This issue of Debian Project News was edited by Laura Arjona, Carl J
Mannino, C=C3=A9dric Boutillier and Justin B Rye.



--x+6KMIRAuhnl3hBn
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=uiZ3
-----END PGP SIGNATURE-----

--x+6KMIRAuhnl3hBn--