[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Debian Project News - March 18th, 2021

The Debian Project                               https://www.debian.org/
Debian Project News                    debian-publicity@lists.debian.org
March 18th, 2021             https://www.debian.org/News/weekly/2021/01/

Welcome to this year's first issue of DPN, the newsletter for the Debian

Debian Project Leader Elections 2021

The call for nominations has been announced for the election of the
Debian Project Leader [1]. The election process starts six weeks prior
to a post vacancy, with the term starting on 2021-04-21. The process
proceeds as follows: Nominations are accepted March 7 through March 13,
Campaigns run Sunday March 14 through April 3, and Voting begins April 4
through April 17.

Bullseye Soft Freeze

The Release Team announced that bullseye reached the soft freeze
milestone on 2021-02-12 [2]. This freeze allows only small targeted
fixes for the next release. New transitions or versions of packages that
may be disruptive are no longer allowed. You can follow the freeze
schedule on the Bullseye Freeze Timeline and Policy [3] page.

    1: https://www.debian.org/devel/leader
    2: https://lists.debian.org/debian-devel-announce/2021/02/msg00002.html
    3: https://release.debian.org/bullseye/freeze_policy.html

Other topics covered in this issue include:

  * Important Debian Security Advisories
  * Securing GRUB2 UEFI SecureBoot 2021
  * News on Debian "bullseye"
  * New Website Design
  * apt-2.2
  * New archive signing keys
  * Debian Quick Image Baker pre-baked images are available
  * Other items of interest
  * Debian running on Rust coreutils
  * New service: debuginfod
  * Google and Debian collaborate to package the Bazel build system in
  * Freexian to provide funding for some Debian projects
  * BSPs, Events, MiniDebCamps, and MiniDebConfs
  * Reports
  * Code, coders, and contributors
  * Discussions
  * Want to continue reading DPN?

Important Debian Security Advisories

Debian's Security Team releases current advisories on a daily basis
(Security Advisories 2021 [4]). Please read them carefully and subscribe
to the security mailing list [5] to keep your systems updated against
any vulnerabilities.

    4: https://www.debian.org/security/2021/
    5: https://lists.debian.org/debian-security-announce/

Some recently released advisories concern these packages: pygments [6],
tiff [7], flatpack [8], grub2 [9], thunderbird [10], docker.io [11],
firefox [12], screen [13], chromium [14], webkit2gtk [15],
openvswitch [16], firejail [17], and connman [18]. The Debian website
also archives [19] the security advisories issued by the Debian Long
Term Support team and posted to the debian-lts-announce mailing
list [20]. Securing GRUB2 UEFI SecureBoot 2021 Since the BootHole [21]
group of bugs announced in GRUB2 in July 2020, security researchers and
developers in Debian and elsewhere have continued to look for further
issues that might allow for circumvention of UEFI Secure Boot. Several
more have been found. See Debian Security Advisory 4867-1 [22] for more
complete details. Debian published a very informative statement [23]
aiming to explain the consequences of these security vulnerabilities,
and what steps have been taken to address them.

    6: https://www.debian.org/security/2021/dsa-4870
    7: https://www.debian.org/security/2021/dsa-4869
    8: https://www.debian.org/security/2021/dsa-4868
    9: https://www.debian.org/security/2021/dsa-4867
   10: https://www.debian.org/security/2021/dsa-4866
   11: https://www.debian.org/security/2021/dsa-4865
   12: https://www.debian.org/security/2021/dsa-4862
   13: https://www.debian.org/security/2021/dsa-4861
   14: https://www.debian.org/security/2021/dsa-4858
   15: https://www.debian.org/security/2021/dsa-4854
   16: https://www.debian.org/security/2021/dsa-4852
   17: https://www.debian.org/security/2021/dsa-4849
   18: https://www.debian.org/security/2021/dsa-4847
   19: https://www.debian.org/lts/security/
   20: https://lists.debian.org/debian-lts-announce/
   21: https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot
   22: https://www.debian.org/security/2021/dsa-4867
   23: https://www.debian.org/security/2021-GRUB-UEFI-SecureBoot/

News on Debian "bullseye"

Homeworld, the default artwork and theme for "bullseye"

We send congratulations to Juliette Taka for her winning submission of
Homeworld [24], which will be the default theme and artwork for Debian
11 "bullseye". Over 5,613 votes were cast between 18 submissions [25].
We thank all who contributed and voted in the process which was a
delightful refresher showing how much of a community Debian truly is.

   24: https://wiki.debian.org/DebianArt/Themes/Homeworld
   25: https://wiki.debian.org/DebianDesktop/Artwork/Bullseye

Release Critical Bug report for Week 11

The bug webinterface of the Ultimate Debian Database [26] currently
knows about the following release critical bugs:

| In Total:                          | 1110 [27] |
|                                    |           |
| Affecting Bullseye:                | 216 [28]  |
|                                    |           |
| Bullseye Only:                     | 51 [29]   |
|                                    |           |
| Remaining to Be Fixed in Bullseye: | 165 [30]  |
|                                    |           |
   26: https://udd.debian.org/bugs.cgi

Of these 165 [31] bugs, the following tags are set:


| Pending in Bullseye:               | 4 [32]  |
|                                    |         |
| Patched in Bullseye:               | 23 [33] |
|                                    |         |
| Duplicates in Bullseye:            | 10 [34] |
|                                    |         |
| Can Be Fixed in a Security Update: | 15 [35] |
|                                    |         |
| Contrib or Non-free in Bullseye:   | 4 [36]  |
|                                    |         |
| Claimed in Bullseye:               | 0 [37]  |
|                                    |         |
| Delayed in Bullseye:               | 1 [38]  |
|                                    |         |
| Otherwise Fixed in Bullseye:       | 8 [39]  |
|                                    |         |


Ignoring all the above (multiple tags possible) 111 [40] bugs need to be
fixed by Debian Contributors to get Debian 11.0 "bullseye" released.


However, in the view of the Release Managers, 182 [41] need to be dealt
with for the release to happen.


Please see "Interpreting the release critical bug statistics [42]" for
an explanation of the different numbers.

   42: https://wiki.debian.org/ProjectNews/RC-Stats

New Website Design

We are very proud of our WWW team and their work in updating [43] the
Debian website [44] into a modern streamlined look. Take a peek! This is
just the beginning of the process as we continue to remove outdated
information, update the site with new information, and improve the
overall end user experience. As always more hands and eyes are helpful,
let us know if you would care to contribute to this new chapter in our

   43: https://bits.debian.org/2020/12/debian-web-new-homepage.html
   44: https://www.debian.org


Julian Andres Klode shared [45] that APT 2.2 has been released. New
features include --error-on=any and rred as a standalone to merge pdiff

   45: https://blog.jak-linux.org/2021/02/18/apt-2.2/

New archive signing keys

The new archive signing keys for Debian 11 have been generated for
future use (shortly). The keys will be included in Debian 11, "bullseye"
and for future point releases for Debian 10, "buster". The keys will go
into use at the release of bullseye or the expiry of the old keys on

pub rsa4096 2021-01-17 [SC] [expires: 2029-01-15]
1F89 983E 0081 FDE0 18F3 CC96 73A4 F27B 8DD4 7936
uid Debian Archive Automatic Signing Key (11/bullseye)
sub rsa4096 2021-01-17 [S] [expires: 2029-01-15]
A723 6886 F3CC CAAD 148A 27F8 0E98 404D 386F A1D9

pub rsa4096 2021-01-17 [SC] [expires: 2029-01-15]
AC53 0D52 0F2F 3269 F5E9 8313 A484 4904 4AAD 5C5D
uid Debian Security Archive Automatic Signing Key (11/bullseye)
sub rsa4096 2021-01-17 [S] [expires: 2029-01-15]
ED54 1312 A33F 1128 F10B 1C6C 5440 4762 BBB6 E853

Keys: https://ftp-master.debian.org/keys/archive-key-11.asc


Debian Quick Image Baker pre-baked images are available

DQIB (Debian Quick Image Baker) provides weekly-generated Debian QEMU
sid images [46] for many architectures. Each download provides a root
filesystem, kernel, initrd, and a README sample QEMU command that will
launch the image with information about how to log in. Other items of
interest Charles Plessy added hundreds of media types to /etc/
mime.types [47]. New mailing list:< debian-
localgroups@lists.debian.org> [48] has been set up to facilitate
communication and provide support for local events and local activities.
Debian running on Rust coreutils Sylvestre Ledru shared details [49] of
the working of rust-coreutils [50] in Debian. The implementation is able
to support and boot with GNOME, install the top 1,000 packages, and
build Firefox.

   46: https://people.debian.org/~gio/dqib/
   47: https://lists.debian.org/debian-devel/2021/01/msg00057.html
   48: https://lists.debian.org/debian-localgroups/
   50: https://tracker.debian.org/pkg/rust-coreutils

New service: debuginfod

Sergio Durigan Junior announced a debuginfod service in Debian [51].
debuginfod [52] allows developers to forego the need to install
debuginfo packages to debug software. It works as a client/server to
provide debugger tools over HTTP.

   51: https://wiki.debian.org/Debuginfod
   52: https://sourceware.org/elfutils/Debuginfod.html

Google and Debian collaborate to package the Bazel build system in Debian

Debian Developer Olek Wojnar and Google Software Engineer Yun Peng
worked with the Bazel team [53] to package Bazel in Debian [54] toward
assisting the medical community with COVID-19 research. Olek shares some
of the technical challenges and details of the project in a video
talk. [55] Freexian to provide funding for some Debian projects Raphael
Hertzog shared details of Freexian's LTS intention to provide
funding [56] for some Debian projects with a portion of the money
collected from its own sponsors. This generous contribution will allow
teams to propose requests for funding within their spheres which overall
will give back to the entire community.

   53: https://blog.bazel.build/2021/03/04/bazel-debian-packaging.html
   55: https://www.youtube.com/watch?v=jLSgky4ISj0&t=23s
   56: https://lists.debian.org/debian-project/2020/11/msg00002.html

BSPs, Events, MiniDebCamps, and MiniDebConfs

Bug Squashing Parties

Upcoming events

There will be a Virtual Bug Squashing Party in Salzburg/Austria [57]
held April 24–25 2021. Some details are still in the planning stage, for
now, please save the date.

   57: https://lists.debian.org/debian-devel-announce/2021/02/msg00000.html

Past events

The Debian India community held MiniDebConf Online India 2021 [58],
January 23–24, 2021. Talks were available in over 6 languages, with
around 45 total events from talks, to BOFs and Workshops. Talks and
Video [59] from the event are available for viewing.

   58: https://in2021.mini.debconf.org/


LTS Freexian Monthly Reports

Freexian issues monthly reports [60] about the work of paid contributors
to Debian Long Term Support.

   60: https://raphaelhertzog.com/tag/Freexian+LTS/

Reproducible Builds status update

Follow the Reproducible Builds blog [61] to get the weekly reports on
their work in the "buster" cycle.

   61: https://reproducible-builds.org/blog/

Packages needing help:

Currently [62] 1204 packages are orphaned [63] and 209 packages are up
for adoption [64]: please visit the complete list of packages which need
your help [65].

   62: https://lists.debian.org/debian-devel/2021/03/msg00063.html
   63: https://www.debian.org/devel/wnpp/orphaned
   64: https://www.debian.org/devel/wnpp/rfa
   65: https://www.debian.org/devel/wnpp/help_requested

Newcomer bugs

Debian has a "newcomer" bug tag, used to indicate bugs which are
suitable for new contributors to use as an entry point to working on
specific packages. There are currently 189 [66] bugs available tagged

   66: https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=newcomer

Code, coders, and contributors

New Package Maintainers since 9 September 2020

Please welcome: Adrien Nayrat, Georgy Komarov, Alex Doyle, Johann
Queuniet, Stephen Gildea, Christoph Groth, Jhon Alejandro Marin
Rodriguez, Adrià García-Alzórriz, Romain Porte, Jakub Ružička, skyper,
James Turton, Alois Schlögl, Judit Foglszinger, Aaron Boxer, Kevin Wu,
Anthony Perkins, Felix Delattre, Ken Ibbotson, Andrei Rozanski, Nis
Martensen , qinxialei, Laurin Hagemann, Jai Flack, Johann Elsass, Fred
Le Meur, Vivek K J, Thiago da Silva Gracini, Jobin J, Selvamani Kannan,
Calum McConnell, Dhyey Patel, Ed Neville, Leonidas S. Barbosa, Lucca
Braga Godoy Mendonça, Chris Keller, Guinness, Sergio de Almeida Cipriano
Junior, Sahil Dhiman, Michel Le Bihan, Fabio Fantoni, Mark Pearson,
Matija Nalis, David Bannon, Federico Grau, Lisa Julia Nebel, Patrick
Jaap, Francisco Emanoel Ferreira, Peymaneh Nejad, Daniel Milde, Stefan
Kropp, Frédéric Pierret, Vipul Kumar, Jarrah Gosbell, John Zaitseff,
Badreddin Aboubakr, Sam Reed, Scupake, Clay Stan, Klaumi Klingsporn,
Vincent Smeets, Emerson dos Santos Queiroz, Alexander Sulfrian,
bill-auger, Marcelo Henrique Cerri, Dan Streetman, Hu Feng, Andrea
Righi, Matthias Klein, Eric Brown, Mayco Souza Berghetti, Robbi Nespu,
Simon Tatham, and Brian Potkin.

New Debian Maintainers

Please welcome: Ricardo Ribalda Delgado, Pierre Gruet, Henry-Nicolas
Tourneur, Aloïs Micard, Jérôme Lebleu, Nis Martensen, Stephan Lachnit,
Felix Salfelder, Aleksey Kravchenko, Étienne Mollier, Timo Röhling,
Fabio Augusto De Muzio Tobich, Arun Kumar Pariyar, Francis Murtagh,
William Desportes, Robin Gustafsson, Nicholas Guriev, Xiang Gao, Maarten
L. Hekkelman, qinxialei, Boian Bonev, Filip Hroch, and Antonio Valentino.

New Debian Developers

Please welcome: Benda XU, Joseph Nahmias, Marcos Fouces, Hayashi
Kentaro,James Valleroy, Helge Deller, Nicholas D Steeves, Nilesh Patra,
David Suárez Rodríguez, and Pierre Gruet.


954 people and 9 teams are currently listed on the Debian
Contributors [67] page for 2021.

   67: https://contributors.debian.org/



  * Source files: 12,323,884
  * Source packages: 28,925
  * Disk usage: 264,071,084 kB
  * Ctags: 9,487,034
  * Source lines of code: 1,077,110,982


  * Source files: 16,868,320
  * Source packages: 33,215
  * Disk usage: 364,735,804 kB
  * Ctags: 3,343,666
  * Source lines of code: 1,510,195,519

Popular packages

  * tar [68]: 99,100 daily users
  * popularity-contest [69]: 96,010 daily users
  * debianutils [70]: 112,659 installations
  * gparted [71]: 14,909 installations
  * grub2-common [72] 54,040 recent upgrades

   68: https://packages.debian.org/buster/tar
   69: https://packages.debian.org/buster/popularity-contest
   70: https://packages.debian.org/buster/debianutils
   71: https://packages.debian.org/buster/gparted
   72: https://packages.debian.org/buster/grub2-common

New and noteworthy packages

Here is a small sample of the many packages added to the unstable Debian
archive [73] in the past few weeks:

  * dnsperf -DNS Performance Testing Tool [74]
  * ptpython -Alternative Python Prompt with auto-completion [75]
  * science-datamanagement -Debian Science Data Management packages [76]
  * dnscap -Network capture utility designed specifically for DNS
traffic [77]
  * logiops -Configuration utility for Logitech mice and keyboards [78]
  * node-cron-validator -- cron-validator is a utility that allows one
to validate cron expression [79]

   73: https://packages.debian.org/unstable/main/newpkg
   74: https://packages.debian.org/unstable/main/dnsperf
   75: https://packages.debian.org/unstable/main/ptpython
   76: https://packages.debian.org/unstable/main/science-datamanagement
   77: https://packages.debian.org/unstable/main/dnscap
   78: https://packages.debian.org/unstable/main/logiops
   79: https://packages.debian.org/unstable/main/node-cron-validator


Debian Developer Stephan Lachnit asked: Is it possible to contribute to
Debian without using one's real name out of privacy concerns [80]?

   80: https://lists.debian.org/debian-devel/2021/02/msg00282.html

William Torrez Corea asked: How to upgrade the O/S to Debian
buster [81]? The thread discussion regards reinstalling vs. upgrading
vs. rebuilding, and a synopsis of Sid/Stable/Testing.

   81: https://lists.debian.org/debian-user/2021/01/msg00321.html

Jerry Mellon asked: How to add a hard drive to an existing system [82]?
Easy read which shows some pitfalls and workarounds to this very common

   82: https://lists.debian.org/debian-user/2021/01/msg00584.html

Dan Hitt asked: How to install Debian 10 without CD or USB access but
with ethernet and Hard Disk usage [83]? This discussion covers a very
fast bios, pxeboot options, grub menuentry entries, netboot, and a hd-
media kernel solution.

   83: https://lists.debian.org/debian-user/2021/01/msg00746.html

John Berden asked: How to fix an incorrect password in Debian 10.8 after
installation [84]?. This thread touches on grub editing at startup, grub
persistence, a miniature emacs and grub editor syntax lesson, and
canonical shell behaviour.

   84: https://lists.debian.org/debian-user/2021/02/msg00164.html

Tips and Tricks

  * Craig Small, explains the CPU/pcpu field of the ps program [85],
most of us run it as ps aux. Here is a great explanation of how the
calculations are collated and presented.
  * Vincent Fourmond shares all of his tips and tricks about QSoas [86].
  * Bastian Venthur details Installing Debian on a Thinkpad T14s [87].

   85: https://dropbear.xyz/2021/01/18/percent-cpu-for-processes/

Once upon a time in Debian:

  * 2010-03-13 to 2010-03-19 Thailand MiniDebCamp 2010 [88]
  * 2014-03-15 to 2014-03-16 Women Mini-DebConf, Barcelona, Spain [89]
  * 2000-03-16 Wichert Akkerman re-elected as DPL [90]
  * 1997-03-17 Ian Murdock elected as chairman of Board of Directors [91]
  * 2005-03-17 Debian Bug #300000 reported by Florian Zumbiehl [92]
  * 2008-03-17 First beta of lenny's debian-installer released [93]

   88: https://wiki.debian.org/DebianThailand/MiniDebCamp2010
   89: https://wiki.debian.org/DebianWomen/Projects/MiniDebconf-Women/2014/
   90: https://www.debian.org/vote/2000/vote_0007
   91: https://www.debian.org/News/1997/19970317
   92: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=300000
   93: https://www.debian.org/devel/debian-installer/News/2008/20080317

Want to continue reading DPN?

Please help us create this newsletter. We still need more volunteer
writers to watch the Debian community and report about what is going on.
Please see the contributing page [94] to find out how to help. We're
looking forward to receiving your mail at

   94: https://wiki.debian.org/ProjectNews/HowToContribute

Subscribe or Unsubscribe [95] from the Debian News mailing list

   95: https://lists.debian.org/debian-news/

This issue of Debian Project News was edited by The Publicity Team with
contributions from Jean-Pierre Giraud, Justin B Rye, Thiago Pezzo, Paulo
Santana and Donald Norwood.

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply to: