Welcome to this year's fourth issue of DPN, the newsletter for the
Debian community. Topics covered in this issue include:
* Welcome to the Debian Project News!
* Internal News/Happenings
* Events: Upcoming and Reports
* Help needed
* More than just code
* Code, coders, and contributors
* Outside News
* Quick Links from Debian Social Media
* Want to continue reading DPN?
Welcome to the Debian Project News!
We hope that you enjoy this edition of the DPN.
For other news, please read the official Debian blog Bits from
Debian , and follow https://micronews.debian.org which feeds <(via
RSS) the @debian> profile on several social networks too.
This point release added corrections for security issues along with a
few adjustments for serious problems. Security advisories have already
been published separately and are referenced where available. Upgrading
an existing installation to either revision can be achieved by pointing
the package management system at one of Debian's many HTTP mirrors. A
comprehensive list of mirrors is available at:
Tobias Frost announced  a new addition to the Debian Developer's
Reference on Package Salvaging. Package Salvaging  allows packages
not officially orphaned or abandoned to be maintained by other
developers or new contributors after some eligibility factors are
The process differs from MIA handling of packages in that it does allow
for negelected or forgotten packages to be brought back into the fold.
There is a set of guidelines  available which outline the phases of
the process, along with additional information and FAQs on the Debian
Reproducible Builds joins the Software Conservancy!
Reproducible Builds  has joined the Software Freedom Conservancy ,
a 501(c)(3) not-for-profit organisation that helps promote, develop and
defend Free, Libre, and Open Source Software (FLOSS) projects. Through
the SFC, member projects may receive donations earmarked for the benefit
of a specific FLOSS project.
The Reproducible Builds project, which began as a project  within
the Debian community, is also critical to the Conservancy’s own
compliance work: A build that cannot be verified may contain code that
triggers different license compliance responsibilities than the
recipient is expecting.
As Reproducible Builds joins Conservancy, it is also receiving a
donation of US$300,000 from the Handshake Foundation  which will
propel the project’s efforts to ensure the future health and usability
of free software.
John Paul Adrian Glaubitz announced and thanked the many contributors
who helped to get Rust available on 14 Debian architectures . The
newest  supported architectures are: mips, mips64el, mipsel, and
This work is the result of the combined effort of many talented people,
and work on LLVM upstream which fixed many many bugs in the MIPSand
PowerPC backends as well as adding support for the PowerPCSPE sub-
Documenting copyright holders in debian/copyright
The FTP team has issued clarifications  in regard to copyright
attribution in debian/copyright; some of the main points:
* Unless a license explicitly states that copyright attributions only
apply to source distributions, they apply as well for the source and
binary. The copyright must be documented in debian/copyright for license
* Be mindful of 2.3 Copyright considerations : Every package must
be accompanied by a verbatim copy of its copyright information and
distribution license in the file /usr/share/doc/package/copyright.
* On rare occasion the FTP masters have determined that full copyright
attribution is both not feasible and, given the nature of the package,
that an appropriate copyright notice does not need to list all copyright
holders; in such cases this tolerance should not be assumed to apply to
The Committee recognises a need for packages to behave differently when
built on different distributions, but this should be done by using
differing source packages, or as part of the build process using current
and future practices such as patches with conditional behaviour or
patching of files during the build rather than at source unpacking time.
As this feature is used by several packages today, there is the need for
a reasonable transition period. However, they will be considered buggy
from when this resolution is accepted, but will not be considered severe
enough to warrant immediate removal from Debian.
After Buster is released, the presence of a vendor-specific patch series
will be a violation of a MUST directive in Debian policy.
The Committee therefore resolves: Any use of dpkg's vendor-specific
patch series feature is a bug for packages in the Debian archive
(including contrib and non-free).
After Buster is released, use of the vendor-specific patch series
feature is forbidden in the Debian archive.
For additional information and the original discussion please see Bug
Developers are reminded to follow up on their plans and evaluate
realistic timelines to accomplish for changes and inclusion into buster.
Changes can be staged in experimental, to avoid disruption. Keep in mind
that other volunteers may not have the same capacity to work on your
goals. Any unfixed bugs are suggested to be fixed via NMU  now
rather than later.
If you would like to help us to get buster out on time and are able to
help fix RC bugs in testing prior to the transition freeze, you can do
that now by looking at the list of RC bugs  or joining the #debian-
bugs irc channel on irc.oftc.net.
The Debian Anti-Harassment Team  is the point of contact for any
community member who would like to help create a more welcoming and
respectful environment in Debian, and is also the point of contact for
reports or concerns about inappropriate behaviour or abuse. The team
will send out small but regular reports to the community.
Should you see interactions that you consider deserve attention, please
let us know. Please do not wait until a problem becomes too big; we can
assist as friendly de-escalators or as mediators. Members may also
forward information for which no action is to be taken, but kept on file
should a problem escalate some time in the future.
We had a request about removing messages from mailing list and
Several attendees at DebConf 18 served as a local anti-harassment team
that handled disputes between attendees and a possible Code of Conduct
violation, mediating in minor issues, and offering advice during the
A general reminder about the CoC was sent via micronews several times
We have been involved in the discussions about the photo policy for
DebConf, and we plan to make a proposal soon.
New Outreachy intern
Debian welcomes Anastasia Tsikoza as our newest Outreachy intern .
The Outreachy program provides internships for people from groups
traditionally underrepresented in technology. Anastasia mentored by Paul
Wise and Raju Devidas, will work on Improving the integration of Debian
derivatives with the Debian infrastructure and the community.
A new port for RISC-V flavour "riscv64" (64-bits little-endian) is now
available in Debian Ports.
With the recent release of debcargo 2.0.0 to crates.io, Debian packages
can be created from your favorite Rust crate and uploaded to the Debian
devscripts 2.18.5 has been released and brings some new uscan features
such as verifying signed tags in git and auto value for dversionmangle.
Chris Lamb called for more volunteers for the FTP Team.
Events: Upcoming and Reports
MiniDebConf Marseille 2019
A miniDebConf will take place in Marseille (France) from 25 to 26 May,
with two days of talks, lightning talks, keysigning party, lunch, and...
beer event Read the announcement  and visit the wiki page of the
event  where you can get all the details, register for the event,
and help in the organisation.
There are many Bug Squashing Parties coming up on our calendars that are
focusing efforts on addressing and fixing release critical bugs that
will delay the release of Debian 10 (buster). BSPs are open to everyone
who wants and is able to get involved. Come on by and help us to make
this release a success!
Netherlands, Venlo, 12 January to 13 January 2019
Hosted at Transceptor Technology and insign.it.
Feel welcome if you want to contribute to Debian, whatever your
experience level. You don't need to be an existing Debian contributor.
Just trying to reproduce a bug and documenting your experience is
Unlike the one we organised for the Stretch release, this BSP will be
over a whole weekend, so hopefully folks from other provinces in Canada
and from the USA can come.
You can register on the wiki page where you will find information
regarding transport, accommodation, food and other useful things.
Expenses to attend this BSP should be sponsored by the Debian Project
The offices of Conova Communications GmbH [CONOVA], located close to
Salzburg Airport W.A. Mozart.
We are happy to invite you to the 6th Debian Bug Squashing Party in
A short registration on the wiki page [BSPSBG] is required to ease the
organisation of the event. On the same page you will find information
regarding transport, (sponsored) accommodation and other useful things.
Debian has a "newcomer" bug tag, used to indicate bugs which are
suitable for new contributors to use as an entry point to working on
specific packages. There are currently 212  bugs available tagged
Carl Chenet opined, You Think the Visual Studio Code binary you use is a
Free Software? Think again.  He points out some of the licensing
practices used in regard to the MIT license, a permissive Free Software
Debian user Aurélien Couderc asked about Bumping an epoch and reusing a
package name , which led to a discussion about requesting upstream
changes for Debian internal policies and the effect on users. Several
alternatives are mentioned in the discussion as well pitfalls of bumping
a version number.
* 2009-12-08 Debian Bug #560000 reported by Mika Tiainen 
* 2016-12-10 MiniDebconf 2016 held in Tokyo, Japan 
* 1996-12-12 Debian 1.2 Released (Rex) 
* 2014-12-13 Bug Squashing Party in Tilburg, The Netherlands 
* 2016-12-13 Debian co-organizes and sponsors Reproducible Builds
Summit in Berlin, Germany 
The Creative Commons Global Summit will be held in Lisbon, Portugal May
9-11 2019. Their Call for Proposals is open until December 10th 2018.
Visit https://summit.creativecommons.org/ for more details and
Quick Links from Debian Social Media
This is an extract from the micronews.debian.org  feed, in which we
have removed the topics already commented on in this DPN issue. You can
skip this section if you already follow micronews.debian.org or <the
@debian> profile in a social network (Pump.io, GNU Social, Mastodon or
Twitter). The items are provided unformatted in descending order by date
(recent news at the top).
Want to continue reading DPN?
Please help us create this newsletter. We still need more volunteer
writers to watch the Debian community and report about what is going on.
Please see the contributing page  to find out how to help. We're
looking forward to receiving your mail at