Paul Sutton

Paul Sutton – personal blog

Libreoffice 7 Alpha 1 Testing

Found on Twitter, posted by @AlternativeTo

While the final version is expected by early August, the first pre-release of LibreOffice 7.0 is now available for download on Linux, MacOS and Windows. It can be installed and used in parallel with the stable version.

LO7 Testing

Happy bug hunting :)

Free Code Camp 12-5-2020

Now that I have completed the first two sections of Responsive Web Design with FreeCodeCamp. It is time to move on to section 3, Applied Visual Design.

appvisualdesign

If you would like to join me and others on this journey of learning anyone can sign up to FreeCodeCamp and learn with 1000's of others all over the world.

My progress is shared here and also on Mastodon, you can sign up with the link below.


Legionnaires' disease

I have been following a conversation on LinkedIn that is suggesting that as many places are closed during the Covid 19 lock down, there could be lots of stagnant water in plumbing which is an ideal breeding ground for water borne diseases such as Legionella [1].

As a result any easing of lock down and reopening of businesses, schools, gyms, and leisure centres, or it seems anywhere that provides access to water, should be combined with measures and funding in place that will ensure these systems are 'flushed' and cleansed fully before re opening.

Interesting discussion and will be interesting to see where the money comes from for this.

  1. UK Government advice on Legionella
  2. CDC Info

Onlyoffice from NextCloud

ONLYOFFICE integration in Nextcloud empowers your users to collaborate on office documents with team members in real time.

Compatibility with Microsoft Office formats means perfect documents, every time.

Resources

Debian 10.4

This is posted here, as it was posted in the Announcement e-mail earlier today.



------------------------------------------------------------------------
The Debian Project                               https://www.debian.org/
Updated Debian 10: 10.4 released                        [email protected]
May 9th, 2020                  https://www.debian.org/News/2020/20200509
------------------------------------------------------------------------


The Debian project is pleased to announce the fourth update of its
stable distribution Debian 10 (codename "buster"). This point release
mainly adds corrections for security issues, along with a few
adjustments for serious problems. Security advisories have already been
published separately and are referenced where available.

Please note that the point release does not constitute a new version of
Debian 10 but only updates some of the packages included. There is no
need to throw away old "buster" media. After installation, packages can
be upgraded to the current versions using an up-to-date Debian mirror.

Those who frequently install updates from security.debian.org won't have
to update many packages, and most such updates are included in the point
release.

New installation images will be available soon at the regular locations.

Upgrading an existing installation to this revision can be achieved by
pointing the package management system at one of Debian's many HTTP
mirrors. A comprehensive list of mirrors is available at:

https://www.debian.org/mirror/list



Miscellaneous Bugfixes
----------------------

This stable update adds a few important corrections to the following
packages:

+---------------------------+-----------------------------------------+
| Package                   | Reason                                  |
+---------------------------+-----------------------------------------+
| apt-cacher-ng [1]         | Enforce secured call to the server in   |
|                           | maintenance job triggering [CVE-2020-   |
|                           | 5202]; allow .zst compression for       |
|                           | tarballs; increase size of the          |
|                           | decompression line buffer for           |
|                           | configuration file reading              |
|                           |                                         |
| backuppc [2]              | Pass the username to start-stop-daemon  |
|                           | when reloading, preventing reload       |
|                           | failures                                |
|                           |                                         |
| base-files [3]            | Update for the point release            |
|                           |                                         |
| brltty [4]                | Reduce severity of log message to avoid |
|                           | generating too many messages when used  |
|                           | with new Orca versions                  |
|                           |                                         |
| checkstyle [5]            | Fix XML External Entity injection issue |
|                           | [CVE-2019-9658 CVE-2019-10782]          |
|                           |                                         |
| choose-mirror [6]         | Update included mirror list             |
|                           |                                         |
| clamav [7]                | New upstream release [CVE-2020-3123]    |
|                           |                                         |
| corosync [8]              | totemsrp: Reduce MTU to avoid           |
|                           | generating oversized packets            |
|                           |                                         |
| corosync-qdevice [9]      | Fix service startup                     |
|                           |                                         |
| csync2 [10]               | Fail HELLO command when SSL is required |
|                           |                                         |
| cups [11]                 | Fix heap buffer overflow [CVE-2020-     |
|                           | 3898] and  "the `ippReadIO` function    |
|                           | may under-read an extension             |
|                           | field"  [CVE-2019-8842]                 |
|                           |                                         |
| dav4tbsync [12]           | New upstream release, restoring         |
|                           | compatibility with newer Thunderbird    |
|                           | versions                                |
|                           |                                         |
| debian-edu-config [13]    | Add policy files for Firefox ESR and    |
|                           | Thunderbird to fix the TLS/SSL setup    |
|                           |                                         |
| debian-installer [14]     | Update for the 4.19.0-9 kernel ABI      |
|                           |                                         |
| debian-installer-netboot- | Rebuild against proposed-updates        |
| images [15]               |                                         |
|                           |                                         |
| debian-security-          | New upstream stable release; update     |
| support [16]              | status of several packages; use         |
|                           | "runuser"  rather than  "su"            |
|                           |                                         |
| distro-info-data [17]     | Add Ubuntu 20.10, and likely end of     |
|                           | support date for stretch                |
|                           |                                         |
| dojo [18]                 | Fix improper regular expression usage   |
|                           | [CVE-2019-10785]                        |
|                           |                                         |
| dpdk [19]                 | New upstream stable release             |
|                           |                                         |
| dtv-scan-tables [20]      | New upstream snapshot; add all current  |
|                           | German DVB-T2 muxes and the Eutelsat-5- |
|                           | West-A satellite                        |
|                           |                                         |
| eas4tbsync [21]           | New upstream release, restoring         |
|                           | compatibility with newer Thunderbird    |
|                           | versions                                |
|                           |                                         |
| edk2 [22]                 | Security fixes [CVE-2019-14558          |
|                           | CVE-2019-14559 CVE-2019-14563 CVE-2019- |
|                           | 14575 CVE-2019-14586 CVE-2019-14587]    |
|                           |                                         |
| el-api [23]               | Fix stretch to buster upgrades that     |
|                           | involve Tomcat 8                        |
|                           |                                         |
| fex [24]                  | Fix a potential security issue in       |
|                           | fexsrv                                  |
|                           |                                         |
| filezilla [25]            | Fix untrusted search path vulnerability |
|                           | [CVE-2019-5429]                         |
|                           |                                         |
| frr [26]                  | Fix extended next hop capability        |
|                           |                                         |
| fuse [27]                 | Remove outdated udevadm commands from   |
|                           | post-install scripts; don't explicitly  |
|                           | remove fuse.conf on purge               |
|                           |                                         |
| fuse3 [28]                | Remove outdated udevadm commands from   |
|                           | post-install scripts; don't explicitly  |
|                           | remove fuse.conf on purge; fix memory   |
|                           | leak in fuse_session_new()              |
|                           |                                         |
| golang-github-prometheus- | Extend validity of test certificates    |
| common [29]               |                                         |
|                           |                                         |
| gosa [30]                 | Replace (un)serialize with json_encode/ |
|                           | json_decode to mitigate PHP object      |
|                           | injection [CVE-2019-14466]              |
|                           |                                         |
| hbci4java [31]            | Support EU directive on payment         |
|                           | services (PSD2)                         |
|                           |                                         |
| hibiscus [32]             | Support EU directive on payment         |
|                           | services (PSD2)                         |
|                           |                                         |
| iputils [33]              | Correct an issue in which ping would    |
|                           | improperly exit with a failure code     |
|                           | when there were untried addresses still |
|                           | available in the getaddrinfo() library  |
|                           | call return value                       |
|                           |                                         |
| ircd-hybrid [34]          | Use dhparam.pem to avoid crash on       |
|                           | startup                                 |
|                           |                                         |
| jekyll [35]               | Allow use of ruby-i18n 0.x and 1.x      |
|                           |                                         |
| jsp-api [36]              | Fix stretch to buster upgrades that     |
|                           | involve Tomcat 8                        |
|                           |                                         |
| lemonldap-ng [37]         | Prevent unwanted access to              |
|                           | administration endpoints [CVE-2019-     |
|                           | 19791]; fix the GrantSession plugin     |
|                           | which could not prohibit logon when two |
|                           | factor authentication was used; fix     |
|                           | arbitrary redirects with OIDC if        |
|                           | redirect_uri was not used               |
|                           |                                         |
| libdatetime-timezone-     | Update included data                    |
| perl [38]                 |                                         |
|                           |                                         |
| libreoffice [39]          | Fix OpenGL slide transitions            |
|                           |                                         |
| libssh [40]               | Fix possible denial of service issue    |
|                           | when handling AES-CTR keys with OpenSSL |
|                           | [CVE-2020-1730]                         |
|                           |                                         |
| libvncserver [41]         | Fix heap overflow [CVE-2019-15690]      |
|                           |                                         |
| linux [42]                | New upstream stable release             |
|                           |                                         |
| linux-latest [43]         | Update kernel ABI to 4.19.0-9           |
|                           |                                         |
| linux-signed-amd64 [44]   | New upstream stable release             |
|                           |                                         |
| linux-signed-arm64 [45]   | New upstream stable release             |
|                           |                                         |
| linux-signed-i386 [46]    | New upstream stable release             |
|                           |                                         |
| lwip [47]                 | Fix buffer overflow [CVE-2020-8597]     |
|                           |                                         |
| lxc-templates [48]        | New upstream stable release; handle     |
|                           | languages that are only UTF-8 encoded   |
|                           |                                         |
| manila [49]               | Fix missing access permissions check    |
|                           | [CVE-2020-9543]                         |
|                           |                                         |
| megatools [50]            | Add support for the new format of       |
|                           | mega.nz links                           |
|                           |                                         |
| mew [51]                  | Fix server SSL certificate validity     |
|                           | checking                                |
|                           |                                         |
| mew-beta [52]             | Fix server SSL certificate validity     |
|                           | checking                                |
|                           |                                         |
| mkvtoolnix [53]           | Rebuild to tighten libmatroska6v5       |
|                           | dependency                              |
|                           |                                         |
| ncbi-blast+ [54]          | Disable SSE4.2 support                  |
|                           |                                         |
| node-anymatch [55]        | Remove unnecessary dependencies         |
|                           |                                         |
| node-dot [56]             | Prevent code execution after prototype  |
|                           | pollution [CVE-2020-8141]               |
|                           |                                         |
| node-dot-prop [57]        | Fix prototype pollution [CVE-2020-8116] |
|                           |                                         |
| node-knockout [58]        | Fix escaping with older Internet        |
|                           | Explorer versions [CVE-2019-14862]      |
|                           |                                         |
| node-mongodb [59]         | Reject invalid _bsontypes [CVE-2019-    |
|                           | 2391 CVE-2020-7610]                     |
|                           |                                         |
| node-yargs-parser [60]    | Fix prototype pollution [CVE-2020-7608] |
|                           |                                         |
| npm [61]                  | Fix arbitrary path access [CVE-2019-    |
|                           | 16775 CVE-2019-16776 CVE-2019-16777]    |
|                           |                                         |
| nvidia-graphics-          | New upstream stable release             |
| drivers [62]              |                                         |
|                           |                                         |
| nvidia-graphics-drivers-  | New upstream stable release             |
| legacy-390xx [63]         |                                         |
|                           |                                         |
| nvidia-settings-          | New upstream release                    |
| legacy-340xx [64]         |                                         |
|                           |                                         |
| oar [65]                  | Revert to stretch behavior for          |
|                           | Storable::dclone perl function, fixing  |
|                           | recursion depth issues                  |
|                           |                                         |
| opam [66]                 | Prefer mccs over aspcud                 |
|                           |                                         |
| openvswitch [67]          | Fix vswitchd abort when a port is added |
|                           | and the controller is down              |
|                           |                                         |
| orocos-kdl [68]           | Fix string conversion with Python 3     |
|                           |                                         |
| owfs [69]                 | Remove broken Python 3 packages         |
|                           |                                         |
| pango1.0 [70]             | Fix crash in                            |
|                           | pango_fc_font_key_get_variations() when |
|                           | key is null                             |
|                           |                                         |
| pgcli [71]                | Add missing dependency on python3-pkg-  |
|                           | resources                               |
|                           |                                         |
| php-horde-data [72]       | Fix authenticated remote code execution |
|                           | vulnerability [CVE-2020-8518]           |
|                           |                                         |
| php-horde-form [73]       | Fix authenticated remote code execution |
|                           | vulnerability [CVE-2020-8866]           |
|                           |                                         |
| php-horde-trean [74]      | Fix authenticated remote code execution |
|                           | vulnerability [CVE-2020-8865]           |
|                           |                                         |
| postfix [75]              | New upstream stable release; fix panic  |
|                           | with Postfix multi-Milter configuration |
|                           | during MAIL FROM; fix d/init.d running  |
|                           | change so it works with multi-instance  |
|                           | again                                   |
|                           |                                         |
| proftpd-dfsg [76]         | Fix memory access issue in keyboard-    |
|                           | interative code in mod_sftp; properly   |
|                           | handle DEBUG, IGNORE, DISCONNECT, and   |
|                           | UNIMPLEMENTED messages in keyboard-     |
|                           | interactive mode                        |
|                           |                                         |
| puma [77]                 | Fix Denial of Service issue [CVE-2019-  |
|                           | 16770]                                  |
|                           |                                         |
| purple-discord [78]       | Fix crashes in ssl_nss_read             |
|                           |                                         |
| python-oslo.utils [79]    | Fix leak of sensitive information via   |
|                           | mistral logs [CVE-2019-3866]            |
|                           |                                         |
| rails [80]                | Fix possible cross-site scripting via   |
|                           | Javascript escape helper [CVE-2020-     |
|                           | 5267]                                   |
|                           |                                         |
| rake [81]                 | Fix command injection vulnerability     |
|                           | [CVE-2020-8130]                         |
|                           |                                         |
| raspi3-firmware [82]      | Fix dtb names mismatch in z50-raspi-    |
|                           | firmware; fix boot on Raspberry Pi      |
|                           | families 1 and 0                        |
|                           |                                         |
| resource-agents [83]      | Fix  "ethmonitor does not list          |
|                           | interfaces without assigned IP          |
|                           | address" ; remove no longer required    |
|                           | xen-toolstack patch; fix non-standard   |
|                           | usage in ZFS agent                      |
|                           |                                         |
| rootskel [84]             | Disable multiple console support if     |
|                           | preseeding is in use                    |
|                           |                                         |
| ruby-i18n [85]            | Fix gemspec generation                  |
|                           |                                         |
| rubygems-integration [86] | Avoid deprecation warnings when users   |
|                           | install a newer version of Rubygems via |
|                           | "gem update --system"                   |
|                           |                                         |
| schleuder [87]            | Improve patch to handle encoding errors |
|                           | introduced in the previous version;     |
|                           | switch default encoding to UTF-8; let   |
|                           | x-add-key handle mails with attached,   |
|                           | quoted-printable encoded keys; fix x-   |
|                           | attach-listkey with mails created by    |
|                           | Thunderbird that include protected      |
|                           | headers                                 |
|                           |                                         |
| scilab [88]               | Fix library loading with OpenJDK 11.0.7 |
|                           |                                         |
| serverspec-runner [89]    | Support Ruby 2.5                        |
|                           |                                         |
| softflowd [90]            | Fix broken flow aggregation which might |
|                           | result in flow table overflow and 100%  |
|                           | CPU usage                               |
|                           |                                         |
| speech-dispatcher [91]    | Fix default pulseaudio latency which    |
|                           | triggers  "scratchy"  output            |
|                           |                                         |
| spl-linux [92]            | Fix deadlock                            |
|                           |                                         |
| sssd [93]                 | Fix sssd_be busy-looping when LDAP      |
|                           | connection is intermittent              |
|                           |                                         |
| systemd [94]              | when authorizing via PolicyKit re-      |
|                           | resolve callback/userdata instead of    |
|                           | caching it [CVE-2020-1712]; install 60- |
|                           | block.rules in udev-udeb and initramfs- |
|                           | tools                                   |
|                           |                                         |
| taglib [95]               | Fix corruption issues with OGG files    |
|                           |                                         |
| tbsync [96]               | New upstream release, restoring         |
|                           | compatibility with newer Thunderbird    |
|                           | versions                                |
|                           |                                         |
| timeshift [97]            | Fix predictable temporary directory use |
|                           | [CVE-2020-10174]                        |
|                           |                                         |
| tinyproxy [98]            | Only set PIDDIR, if PIDFILE is a non-   |
|                           | zero length string                      |
|                           |                                         |
| tzdata [99]               | New upstream stable release             |
|                           |                                         |
| uim [100]                 | unregister modules that are not         |
|                           | installed, fixing a regression in the   |
|                           | previous upload                         |
|                           |                                         |
| user-mode-linux [101]     | Fix build failure with current stable   |
|                           | kernels                                 |
|                           |                                         |
| vite [102]                | Fix crash when there are more than 32   |
|                           | elements                                |
|                           |                                         |
| waagent [103]             | New upstream release; support co-       |
|                           | installation with cloud-init            |
|                           |                                         |
| websocket-api [104]       | Fix stretch to buster upgrades that     |
|                           | involve Tomcat 8                        |
|                           |                                         |
| wpa [105]                 | Do not try to detect PSK mismatch       |
|                           | during PTK rekeying; check for FT       |
|                           | support when selecting FT suites; fix   |
|                           | MAC randomisation issue with some cards |
|                           |                                         |
| xdg-utils [106]           | xdg-open: fix pcmanfm check and         |
|                           | handling of directories with spaces in  |
|                           | their names; xdg-screensaver: Sanitise  |
|                           | window name before sending it over D-   |
|                           | Bus; xdg-mime: Create config directory  |
|                           | if it does not exist yet                |
|                           |                                         |
| xtrlock [107]             | Fix blocking of (some) multitouch       |
|                           | devices while locked [CVE-2016-10894]   |
|                           |                                         |
| zfs-linux [108]           | Fix potential deadlock issues           |
|                           |                                         |
+---------------------------+-----------------------------------------+

    1: https://packages.debian.org/src:apt-cacher-ng
    2: https://packages.debian.org/src:backuppc
    3: https://packages.debian.org/src:base-files
    4: https://packages.debian.org/src:brltty
    5: https://packages.debian.org/src:checkstyle
    6: https://packages.debian.org/src:choose-mirror
    7: https://packages.debian.org/src:clamav
    8: https://packages.debian.org/src:corosync
    9: https://packages.debian.org/src:corosync-qdevice
   10: https://packages.debian.org/src:csync2
   11: https://packages.debian.org/src:cups
   12: https://packages.debian.org/src:dav4tbsync
   13: https://packages.debian.org/src:debian-edu-config
   14: https://packages.debian.org/src:debian-installer
   15: https://packages.debian.org/src:debian-installer-netboot-images
   16: https://packages.debian.org/src:debian-security-support
   17: https://packages.debian.org/src:distro-info-data
   18: https://packages.debian.org/src:dojo
   19: https://packages.debian.org/src:dpdk
   20: https://packages.debian.org/src:dtv-scan-tables
   21: https://packages.debian.org/src:eas4tbsync
   22: https://packages.debian.org/src:edk2
   23: https://packages.debian.org/src:el-api
   24: https://packages.debian.org/src:fex
   25: https://packages.debian.org/src:filezilla
   26: https://packages.debian.org/src:frr
   27: https://packages.debian.org/src:fuse
   28: https://packages.debian.org/src:fuse3
   29: https://packages.debian.org/src:golang-github-prometheus-common
   30: https://packages.debian.org/src:gosa
   31: https://packages.debian.org/src:hbci4java
   32: https://packages.debian.org/src:hibiscus
   33: https://packages.debian.org/src:iputils
   34: https://packages.debian.org/src:ircd-hybrid
   35: https://packages.debian.org/src:jekyll
   36: https://packages.debian.org/src:jsp-api
   37: https://packages.debian.org/src:lemonldap-ng
   38: https://packages.debian.org/src:libdatetime-timezone-perl
   39: https://packages.debian.org/src:libreoffice
   40: https://packages.debian.org/src:libssh
   41: https://packages.debian.org/src:libvncserver
   42: https://packages.debian.org/src:linux
   43: https://packages.debian.org/src:linux-latest
   44: https://packages.debian.org/src:linux-signed-amd64
   45: https://packages.debian.org/src:linux-signed-arm64
   46: https://packages.debian.org/src:linux-signed-i386
   47: https://packages.debian.org/src:lwip
   48: https://packages.debian.org/src:lxc-templates
   49: https://packages.debian.org/src:manila
   50: https://packages.debian.org/src:megatools
   51: https://packages.debian.org/src:mew
   52: https://packages.debian.org/src:mew-beta
   53: https://packages.debian.org/src:mkvtoolnix
   54: https://packages.debian.org/src:ncbi-blast+
   55: https://packages.debian.org/src:node-anymatch
   56: https://packages.debian.org/src:node-dot
   57: https://packages.debian.org/src:node-dot-prop
   58: https://packages.debian.org/src:node-knockout
   59: https://packages.debian.org/src:node-mongodb
   60: https://packages.debian.org/src:node-yargs-parser
   61: https://packages.debian.org/src:npm
   62: https://packages.debian.org/src:nvidia-graphics-drivers
   63: https://packages.debian.org/src:nvidia-graphics-drivers-legacy-390xx
   64: https://packages.debian.org/src:nvidia-settings-legacy-340xx
   65: https://packages.debian.org/src:oar
   66: https://packages.debian.org/src:opam
   67: https://packages.debian.org/src:openvswitch
   68: https://packages.debian.org/src:orocos-kdl
   69: https://packages.debian.org/src:owfs
   70: https://packages.debian.org/src:pango1.0
   71: https://packages.debian.org/src:pgcli
   72: https://packages.debian.org/src:php-horde-data
   73: https://packages.debian.org/src:php-horde-form
   74: https://packages.debian.org/src:php-horde-trean
   75: https://packages.debian.org/src:postfix
   76: https://packages.debian.org/src:proftpd-dfsg
   77: https://packages.debian.org/src:puma
   78: https://packages.debian.org/src:purple-discord
   79: https://packages.debian.org/src:python-oslo.utils
   80: https://packages.debian.org/src:rails
   81: https://packages.debian.org/src:rake
   82: https://packages.debian.org/src:raspi3-firmware
   83: https://packages.debian.org/src:resource-agents
   84: https://packages.debian.org/src:rootskel
   85: https://packages.debian.org/src:ruby-i18n
   86: https://packages.debian.org/src:rubygems-integration
   87: https://packages.debian.org/src:schleuder
   88: https://packages.debian.org/src:scilab
   89: https://packages.debian.org/src:serverspec-runner
   90: https://packages.debian.org/src:softflowd
   91: https://packages.debian.org/src:speech-dispatcher
   92: https://packages.debian.org/src:spl-linux
   93: https://packages.debian.org/src:sssd
   94: https://packages.debian.org/src:systemd
   95: https://packages.debian.org/src:taglib
   96: https://packages.debian.org/src:tbsync
   97: https://packages.debian.org/src:timeshift
   98: https://packages.debian.org/src:tinyproxy
   99: https://packages.debian.org/src:tzdata
  100: https://packages.debian.org/src:uim
  101: https://packages.debian.org/src:user-mode-linux
  102: https://packages.debian.org/src:vite
  103: https://packages.debian.org/src:waagent
  104: https://packages.debian.org/src:websocket-api
  105: https://packages.debian.org/src:wpa
  106: https://packages.debian.org/src:xdg-utils
  107: https://packages.debian.org/src:xtrlock
  108: https://packages.debian.org/src:zfs-linux

Security Updates
----------------

This revision adds the following security updates to the stable release.
The Security Team has already released an advisory for each of these
updates:

+----------------+-----------------------------+
| Advisory ID    | Package                     |
+----------------+-----------------------------+
| DSA-4616 [109] | qemu [110]                  |
|                |                             |
| DSA-4617 [111] | qtbase-opensource-src [112] |
|                |                             |
| DSA-4618 [113] | libexif [114]               |
|                |                             |
| DSA-4619 [115] | libxmlrpc3-java [116]       |
|                |                             |
| DSA-4620 [117] | firefox-esr [118]           |
|                |                             |
| DSA-4623 [119] | postgresql-11 [120]         |
|                |                             |
| DSA-4624 [121] | evince [122]                |
|                |                             |
| DSA-4625 [123] | thunderbird [124]           |
|                |                             |
| DSA-4627 [125] | webkit2gtk [126]            |
|                |                             |
| DSA-4629 [127] | python-django [128]         |
|                |                             |
| DSA-4630 [129] | python-pysaml2 [130]        |
|                |                             |
| DSA-4631 [131] | pillow [132]                |
|                |                             |
| DSA-4632 [133] | ppp [134]                   |
|                |                             |
| DSA-4633 [135] | curl [136]                  |
|                |                             |
| DSA-4634 [137] | opensmtpd [138]             |
|                |                             |
| DSA-4635 [139] | proftpd-dfsg [140]          |
|                |                             |
| DSA-4636 [141] | python-bleach [142]         |
|                |                             |
| DSA-4637 [143] | network-manager-ssh [144]   |
|                |                             |
| DSA-4638 [145] | chromium [146]              |
|                |                             |
| DSA-4639 [147] | firefox-esr [148]           |
|                |                             |
| DSA-4640 [149] | graphicsmagick [150]        |
|                |                             |
| DSA-4641 [151] | webkit2gtk [152]            |
|                |                             |
| DSA-4642 [153] | thunderbird [154]           |
|                |                             |
| DSA-4643 [155] | python-bleach [156]         |
|                |                             |
| DSA-4644 [157] | tor [158]                   |
|                |                             |
| DSA-4645 [159] | chromium [160]              |
|                |                             |
| DSA-4646 [161] | icu [162]                   |
|                |                             |
| DSA-4647 [163] | bluez [164]                 |
|                |                             |
| DSA-4648 [165] | libpam-krb5 [166]           |
|                |                             |
| DSA-4649 [167] | haproxy [168]               |
|                |                             |
| DSA-4650 [169] | qbittorrent [170]           |
|                |                             |
| DSA-4651 [171] | mediawiki [172]             |
|                |                             |
| DSA-4652 [173] | gnutls28 [174]              |
|                |                             |
| DSA-4653 [175] | firefox-esr [176]           |
|                |                             |
| DSA-4654 [177] | chromium [178]              |
|                |                             |
| DSA-4655 [179] | firefox-esr [180]           |
|                |                             |
| DSA-4656 [181] | thunderbird [182]           |
|                |                             |
| DSA-4657 [183] | git [184]                   |
|                |                             |
| DSA-4658 [185] | webkit2gtk [186]            |
|                |                             |
| DSA-4659 [187] | git [188]                   |
|                |                             |
| DSA-4660 [189] | awl [190]                   |
|                |                             |
| DSA-4661 [191] | openssl [192]               |
|                |                             |
| DSA-4663 [193] | python-reportlab [194]      |
|                |                             |
| DSA-4664 [195] | mailman [196]               |
|                |                             |
| DSA-4665 [197] | qemu [198]                  |
|                |                             |
| DSA-4666 [199] | openldap [200]              |
|                |                             |
| DSA-4667 [201] | linux-signed-amd64 [202]    |
|                |                             |
| DSA-4667 [203] | linux-signed-arm64 [204]    |
|                |                             |
| DSA-4667 [205] | linux-signed-i386 [206]     |
|                |                             |
| DSA-4667 [207] | linux [208]                 |
|                |                             |
| DSA-4669 [209] | nodejs [210]                |
|                |                             |
| DSA-4671 [211] | vlc [212]                   |
|                |                             |
| DSA-4672 [213] | trafficserver [214]         |
|                |                             |
+----------------+-----------------------------+

  109: https://www.debian.org/security/2020/dsa-4616
  110: https://packages.debian.org/src:qemu
  111: https://www.debian.org/security/2020/dsa-4617
  112: https://packages.debian.org/src:qtbase-opensource-src
  113: https://www.debian.org/security/2020/dsa-4618
  114: https://packages.debian.org/src:libexif
  115: https://www.debian.org/security/2020/dsa-4619
  116: https://packages.debian.org/src:libxmlrpc3-java
  117: https://www.debian.org/security/2020/dsa-4620
  118: https://packages.debian.org/src:firefox-esr
  119: https://www.debian.org/security/2020/dsa-4623
  120: https://packages.debian.org/src:postgresql-11
  121: https://www.debian.org/security/2020/dsa-4624
  122: https://packages.debian.org/src:evince
  123: https://www.debian.org/security/2020/dsa-4625
  124: https://packages.debian.org/src:thunderbird
  125: https://www.debian.org/security/2020/dsa-4627
  126: https://packages.debian.org/src:webkit2gtk
  127: https://www.debian.org/security/2020/dsa-4629
  128: https://packages.debian.org/src:python-django
  129: https://www.debian.org/security/2020/dsa-4630
  130: https://packages.debian.org/src:python-pysaml2
  131: https://www.debian.org/security/2020/dsa-4631
  132: https://packages.debian.org/src:pillow
  133: https://www.debian.org/security/2020/dsa-4632
  134: https://packages.debian.org/src:ppp
  135: https://www.debian.org/security/2020/dsa-4633
  136: https://packages.debian.org/src:curl
  137: https://www.debian.org/security/2020/dsa-4634
  138: https://packages.debian.org/src:opensmtpd
  139: https://www.debian.org/security/2020/dsa-4635
  140: https://packages.debian.org/src:proftpd-dfsg
  141: https://www.debian.org/security/2020/dsa-4636
  142: https://packages.debian.org/src:python-bleach
  143: https://www.debian.org/security/2020/dsa-4637
  144: https://packages.debian.org/src:network-manager-ssh
  145: https://www.debian.org/security/2020/dsa-4638
  146: https://packages.debian.org/src:chromium
  147: https://www.debian.org/security/2020/dsa-4639
  148: https://packages.debian.org/src:firefox-esr
  149: https://www.debian.org/security/2020/dsa-4640
  150: https://packages.debian.org/src:graphicsmagick
  151: https://www.debian.org/security/2020/dsa-4641
  152: https://packages.debian.org/src:webkit2gtk
  153: https://www.debian.org/security/2020/dsa-4642
  154: https://packages.debian.org/src:thunderbird
  155: https://www.debian.org/security/2020/dsa-4643
  156: https://packages.debian.org/src:python-bleach
  157: https://www.debian.org/security/2020/dsa-4644
  158: https://packages.debian.org/src:tor
  159: https://www.debian.org/security/2020/dsa-4645
  160: https://packages.debian.org/src:chromium
  161: https://www.debian.org/security/2020/dsa-4646
  162: https://packages.debian.org/src:icu
  163: https://www.debian.org/security/2020/dsa-4647
  164: https://packages.debian.org/src:bluez
  165: https://www.debian.org/security/2020/dsa-4648
  166: https://packages.debian.org/src:libpam-krb5
  167: https://www.debian.org/security/2020/dsa-4649
  168: https://packages.debian.org/src:haproxy
  169: https://www.debian.org/security/2020/dsa-4650
  170: https://packages.debian.org/src:qbittorrent
  171: https://www.debian.org/security/2020/dsa-4651
  172: https://packages.debian.org/src:mediawiki
  173: https://www.debian.org/security/2020/dsa-4652
  174: https://packages.debian.org/src:gnutls28
  175: https://www.debian.org/security/2020/dsa-4653
  176: https://packages.debian.org/src:firefox-esr
  177: https://www.debian.org/security/2020/dsa-4654
  178: https://packages.debian.org/src:chromium
  179: https://www.debian.org/security/2020/dsa-4655
  180: https://packages.debian.org/src:firefox-esr
  181: https://www.debian.org/security/2020/dsa-4656
  182: https://packages.debian.org/src:thunderbird
  183: https://www.debian.org/security/2020/dsa-4657
  184: https://packages.debian.org/src:git
  185: https://www.debian.org/security/2020/dsa-4658
  186: https://packages.debian.org/src:webkit2gtk
  187: https://www.debian.org/security/2020/dsa-4659
  188: https://packages.debian.org/src:git
  189: https://www.debian.org/security/2020/dsa-4660
  190: https://packages.debian.org/src:awl
  191: https://www.debian.org/security/2020/dsa-4661
  192: https://packages.debian.org/src:openssl
  193: https://www.debian.org/security/2020/dsa-4663
  194: https://packages.debian.org/src:python-reportlab
  195: https://www.debian.org/security/2020/dsa-4664
  196: https://packages.debian.org/src:mailman
  197: https://www.debian.org/security/2020/dsa-4665
  198: https://packages.debian.org/src:qemu
  199: https://www.debian.org/security/2020/dsa-4666
  200: https://packages.debian.org/src:openldap
  201: https://www.debian.org/security/2020/dsa-4667
  202: https://packages.debian.org/src:linux-signed-amd64
  203: https://www.debian.org/security/2020/dsa-4667
  204: https://packages.debian.org/src:linux-signed-arm64
  205: https://www.debian.org/security/2020/dsa-4667
  206: https://packages.debian.org/src:linux-signed-i386
  207: https://www.debian.org/security/2020/dsa-4667
  208: https://packages.debian.org/src:linux
  209: https://www.debian.org/security/2020/dsa-4669
  210: https://packages.debian.org/src:nodejs
  211: https://www.debian.org/security/2020/dsa-4671
  212: https://packages.debian.org/src:vlc
  213: https://www.debian.org/security/2020/dsa-4672
  214: https://packages.debian.org/src:trafficserver

Removed packages
----------------

The following packages were removed due to circumstances beyond our
control:

+-------------------------+--------------------------------------------+
| Package                 | Reason                                     |
+-------------------------+--------------------------------------------+
| getlive [215]           | Broken due to Hotmail changes              |
|                         |                                            |
| gplaycli [216]          | Broken by Google API changes               |
|                         |                                            |
| kerneloops [217]        | Upstream service no longer available       |
|                         |                                            |
| lambda-align2 [218]     | [arm64 armel armhf i386 mips64el ppc64el   |
|                         | s390x] Broken on non-amd64 architectures   |
|                         |                                            |
| libmicrodns [219]       | Security issues                            |
|                         |                                            |
| libperlspeak-perl [220] | Security issues; unmaintained              |
|                         |                                            |
| quotecolors [221]       | Incompatible with newer Thunderbird        |
|                         | versions                                   |
|                         |                                            |
| torbirdy [222]          | Incompatible with newer Thunderbird        |
|                         | versions                                   |
|                         |                                            |
| ugene [223]             | Non-free; fails to build                   |
|                         |                                            |
| yahoo2mbox [224]        | Broken for several years                   |
|                         |                                            |
+-------------------------+--------------------------------------------+

  215: https://packages.debian.org/src:getlive
  216: https://packages.debian.org/src:gplaycli
  217: https://packages.debian.org/src:kerneloops
  218: https://packages.debian.org/src:lambda-align2
  219: https://packages.debian.org/src:libmicrodns
  220: https://packages.debian.org/src:libperlspeak-perl
  221: https://packages.debian.org/src:quotecolors
  222: https://packages.debian.org/src:torbirdy
  223: https://packages.debian.org/src:ugene
  224: https://packages.debian.org/src:yahoo2mbox

Debian Installer
----------------

The installer has been updated to include the fixes incorporated into
stable by the point release.


URLs
----

The complete lists of packages that have changed with this revision:

http://ftp.debian.org/debian/dists/buster/ChangeLog


The current stable distribution:

http://ftp.debian.org/debian/dists/stable/


Proposed updates to the stable distribution:

http://ftp.debian.org/debian/dists/proposed-updates


stable distribution information (release notes, errata etc.):

https://www.debian.org/releases/stable/


Security announcements and information:

https://www.debian.org/security/



About Debian
------------

The Debian Project is an association of Free Software developers who
volunteer their time and effort in order to produce the completely free
operating system Debian.


Contact Information
-------------------

For further information, please visit the Debian web pages at
https://www.debian.org/, send mail to <[email protected]>, or contact the
stable release team at <[email protected]>.

More Trinket Coding

Trinket is a web based development platform. One of it's features is the programming language blocks, which is in fact a block based front end and creates Python programs.

I am sharing these on my blog today, even though I also shared earlier in the week on LinkedIn and also on Twitteras part of the Paignton Library Virtual Code Club.

Drawing a circle

circle1

And the associated output

circle1

Drawing a star

star1

And the associated output

star2

I am working on a book to update my previous Nested loops guide I wrote a few years ago. This needed updating anyway so it would cover Scratch 3.0. This book / guide is work in progress, and will be typeset in $\LaTeX$ using Overleaf

#programming, #trinket, #Blocks, #python, #WebIDE, #LaTeX, #Overleaf, #nestedloops, #loops, #codeclub

cc-by logo

Licenced under Attribution 4.0 International (CC BY 4.0)

Big Blue Button

The Covid 19 lock down has given me more of a chance to look at the Big Blue Button, open source video conferencing platform.

As part of this, you can create a 'room' invite attendees, upload presentations (pdf) and also share your screen so the system is ideal for teaching groups of people or having virtual meetings. It also has webcam and microphone support.

big blue button1

Big blue button2

Free Code Camp update 7/5/2020

I have now completed the CSS module of Free Code Camp responsive web design.

css complete

So now completed the last few exercises in the CSS module and therefore 2 of the modules as illustrated blow

css progress

So next next module is Applied Visual Design

Malaria Treatment

Even though we are in a global Covid 19 pandemic, it does not mean other important discoveries are not being made.

The BBC reported on May 4th that a microbe has been found that can block Malaria [1]. This is an important discovery, as the Center for Disease Control and Prevention (CDC) article [2] suggests that Malaria killed 405,000 people i 2018.

Discoveries such as this, surely give the world hope that a treatment for Covid-19 will eventually be found. It also highlights the importance of research and proper funding for research.

  1. BBC Malaria article
  2. CDC Malaria Statistics and information

#Malaria, #treatment, #Disease, #funding, #covid19, #research, #progress, #STEM, #bbc, #science, #news

cc-by logo

Licenced under Attribution 4.0 International (CC BY 4.0)

Creating a write freely blog

Creating a blog post on a writefreely instance is a case of:

Logging in to your account, after which you are simply presented with your page where you can start typing.

Add a title, then the main body of your post.

I sometimes add a list of links, which relate to any items mentioned in my post. I then add a list of tags. Under that I usually have a sort of footer, which has copyleft information both in text and a graphic.

To add a picture you need to add some markdown which points to the location of the image.

![cc-by logo](https://raw.githubusercontent.com/zleap/blogmedia/master/88x31.png)

For the purpose of this, I am creating a draft, however once the post is finished, clicking on draft at the top, will allow me to 'publish to' a blog hosted by my account. Write freely allows for multiple blogs from the same login. Which is helpful for different subjects or topics for example.

resources

#writefreely, #create, #blog, #post

cc-by logo

Licenced under Attribution 4.0 International (CC BY 4.0)