FOSS Activites in July 2021

5-minute read
debian • ubuntu • open-source
debian • ubuntu • monthly

Here’s my (twenty-second) monthly but brief update about the activities I’ve done in the F/L/OSS world.

Debian

This was my 31st month of actively contributing to Debian. I became a DM in late March 2019 and a DD on Christmas ‘19! \o/

I spent most of my free time on Clubhouse but still did everything I usually do (but did not go much beyond that, really).

Anyway, I did the following stuff in Debian:

Uploads and bug fixes:

Other $things:

  • Mentoring for newcomers.
  • Moderation of -project mailing list.

Ubuntu

This was my 6th month of actively contributing to Ubuntu. Now that I’ve joined Canonical to work on Ubuntu full-time, there’s a bunch of things I do! \o/

I mostly worked on different things, I guess. But mostly on packaging keylime and some Google Agents upload(s) and SRU(s). Also did a lot of reviewing, et al.

I was too lazy to maintain a list of things I worked on so there’s no concrete list atm. Maybe I’ll get back to this section later or will start to list stuff from next month onward, as I’ve been doing before. :D

Debian (E)LTS

Debian Long Term Support (LTS) is a project to extend the lifetime of all Debian stable releases to (at least) 5 years. Debian LTS is not handled by the Debian security team, but by a separate group of volunteers and companies interested in making it a success.

And Debian Extended LTS (ELTS) is its sister project, extending support to the Jessie release (+2 years after LTS support).

This was my twenty-second month as a Debian LTS and eleventh month as a Debian ELTS paid contributor.
I was assigned 39.75 hours for LTS and 40.00 hours for ELTS and worked on the following things:

LTS CVE Fixes and Announcements:

ELTS CVE Fixes and Announcements:

Other (E)LTS Work:

  • Front-desk duty from 26-07 until 01-08 for both LTS and ELTS.
  • Triaged nodejs, mongodb, bluez, libmatio, mbedtls, node-url-parse, otrs2, polipo, ruby-bindata, util-linux, exiv2, ruby2.3, varnish, gdal, prosody, glibc, gdal, rpm, icu, ckeditor, libvirt, libjdom1-java, libjdom2-java, tesseract, util-linux, qemu, pillow, tomcat8, libcommons-compress-java, 389-ds-base, and intel-microcode.
  • Mark CVE-2021-22930/nodejs as end-of-life for stretch.
  • Mark CVE-2021-20333/mongodb as end-of-life for stretch.
  • Mark CVE-2021-3652/389-ds-base as no-dsa for stretch.
  • Mark CVE-2021-3658/bluez as no-dsa for stretch.
  • Mark CVE-2020-19497/libmatio as no-dsa for stretch.
  • Mark CVE-2021-24119/mbedtls as no-dsa for stretch.
  • Mark CVE-2021-3664/node-url-parse as end-of-life for stretch.
  • Mark CVE-2021-36091/otrs2 as no-dsa for stretch.
  • Mark CVE-2021-36092/otrs2 as no-dsa for stretch.
  • Mark CVE-2020-36420/polipo as ignored for stretch.
  • Mark CVE-2021-32823/ruby-bindata as no-dsa for stretch.
  • Mark CVE-2021-37600/util-linux as no-dsa for stretch.
  • Mark CVE-2019-25050/gdal as not-affected for stretch.
  • Mark CVE-2021-37601/prosody as not-affected for stretch instead.
  • Mark CVE-2021-35942/glibc as no-dsa for jessie.
  • Mark CVE-2021-36081/tesseract as not-affected for jessie.
  • Mark CVE-2021-35939/rpm as no-dsa for jessie.
  • Mark CVE-2021-35938/rpm as no-dsa for jessie.
  • Mark CVE-2021-35937/rpm as no-dsa for jessie.
  • Mark CVE-2021-30535/icu as not-affected for jessie.
  • Mark CVE-2021-3667/libvirt as not-affected for jessie.
  • Mark CVE-2021-3631/libvirt as no-dsa for jessie.
  • Mark CVE-2021-21391/ckeditor as no-dsa for jessie.
  • Mark CVE-2021-36090/libcommons-compress-java as no-dsa for jessie.
  • Mark CVE-2021-3638/qemu as not-affected for jessie.
  • Mark CVE-2021-34552/pillow as no-dsa for jessie.
  • Mark CVE-2021-37600/util-linux as no-dsa for jessie.
  • Mark CVE-2019-25050/gdal as not-affected for jessie.
  • Mark CVE-2021-3658/bluez as no-dsa for jessie.
  • Auto EOL’ed tiff, dcraw, libspring-security-2.0-java, rabbitmq-server, unrar-nonfree, darktable, mruby, htslib, ndpi, sam2p, libmatio, webkit2gtk, mongodb, otrs2, nodejs, vlc, jruby, asterisk, drupal7, libapache2-mod-auth-openidc, mosquitto, sylpheed, claws-mail, prosody, libapache2-mod-auth-mellon, and linux for jessie.
  • Fix version of libjdom2-java’s ELA.
  • Attended monthly Debian LTS meeting.
  • Answered questions (& discussions) on IRC (#debian-lts and #debian-elts).
  • General and other discussions on LTS private and public mailing list.

Until next time.
:wq for today.