Gentoo Weekly Newsletter 9 May 2005
Ulrich Plate <[email protected]> Tue, 10 May 2005 12:56:41 +0200
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
With our sincere apologies for the delay: --------------------------------------------------------------------------- Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/current.xml This is the Gentoo Weekly Newsletter for the week of 9 May 2005. --------------------------------------------------------------------------- ============== 1. Gentoo News ============== Recruiting printing experts --------------------------- The printing herd is looking for help with some of their packages, particularly to close some of the more than a hundred bugs[1] that have accumulated because the team is severely understaffed. People with considerable experience in both Gentoo and applications or utilities like CUPS, Ghostscript, gimp-print, xpdf, acroread and more, are vigorously encouraged to approach Heinrich Wendel[2] directly, or contact the Gentoo developer relations[3] with a short self-introduction including a few words on your experiences in the field. 1. http://shorl.com/gunygraprifatra 2. [email protected] 3. [email protected] News from the Forums -------------------- Staff shuffle at the Forums[4] again. Administrator Christian Hartmann[5] is back in play after a timeout of several weeks. During his absence, fellow admin Tom Knight[6] has updated the forum software to the latest phpBB version 2.0.15, and made some useful changes to the search function. The collection of these and other announcements can always be found in the News & Announcements forum[7]. 4. http://forums.gentoo.org 5. [email protected] 6. [email protected] 7. http://forums.gentoo.org/viewforum-f-16.html ======================== 2. Developer of the week ======================== "There must be no barriers to freedom of inquiry." -- Danny van Dyk (kugelfang) ----------- Figure 2.1: Danny van Dyk aka kugelfang http://www.gentoo.org/images/gwn/20050505_kugelfang.jpg This weeks featured develeoper is Danny van Dyk[8], the Operational Lead (with Mike Doty[9]) and Gentoo/AMD64 Release Coordinator, as well as a member of the Gentoo Scientific Project. "My work as operational lead developer for Gentoo/AMD64 mainly requires me to be update on the things the other devs do, coordinate their work, and apart from that I try to fix as many open bugs as possible, which is how I was recruited onto the team in the first place." 8. [email protected] 9. [email protected] Gentoo is Danny's first OSS project, and he takes quite some pride in the work he has done for Gentoo Linux on AMD64. He is a student of physics at the University of Dortmund and spends a lot of his time on Gentoo. When he isn't busy studying himself he works as a tutor and helps other students with trivial things such as mathematics, physics and programming languages, although he is for hire at the moment since his tutor job has ended. He was appointed as release coordinator for AMD64 quite recently. Jason Huebel[10] had him step in to make the 2005.0 release media (LiveCDs, stages, package-CD). His computers all have greek letters as host names to make them more interesting, and his collection of machine covers most of x86, ppc and amd64. His most important tool seems to be a HP LaserJet 4+, while on the software side he shows how open-minded he can be by using KDE along with Mozilla Thunderbird and XMMS, showing off the friendly coexistence of things Qt and Gtk. 10. [email protected] Even more amazingly he plays the flute and loves to cook, especially new and untested meals that show what real hackers can do in real life. To any females in the appropriate age range in Witten (where Danny lives:) He is single, and has an impressive set of skills. Danny's motto is borrowed from Robert Oppenheimer, and there's more to it than just the headline above: "There is no place for dogma in science. The scientist is free, and must be free to ask any questions, to doubt any assertion, to seek for any evidence, to correct any errors." ========================= 3. Heard in the community ========================= Web forums ---------- Sudden strictness catching users unaware FEATURES="strict" was enabled several weeks ago, but the number of people who've been confused by new error messages and outright installation errors hasn't declined. Maybe that's because there was no "official" announcement of the change? This thread has been made sticky to allow for quick referral of people with the same errors: * Portage does more security checks? Digest verification fails[11] 11. http://forums.gentoo.org/viewtopic-t-325007.html Next generationinitreplacement Yet another community project[12] originating from the apocryphic sidelines of the greater Gentoo realm has attracted not only hundreds of replies to the original thread in the Forums, it's already carried on Freshmeat and getting some media coverage. Swedish forum user Jimmy Wennlund has devised this "replacement for the old and in many ways deprecated sysvinit" that just made it into the official Portage tree last weekend: 12. http://jw.dyndns.org/initng/ * Beta test New Init system, realy improved boot time.[13] * Initng in Portage[14] 13. http://forums.gentoo.org/viewtopic-t-331844.html 14. http://packages.gentoo.org/ebuilds/?initng-0.0.10 Inofficial install media released Together with a small team of contributors[15], Bob Perdaina (a forum regular and author of a popular howto on installing Gentoo with an underlying NPTL structure) has released a series of bootable CDs containing stage 3 tarballs made to work as if you were installing from stage 1. The name of the project takes some getting used to, though: 15. http://jackass.homelinux.org/ * Jackass! 2005.0 is Released![16] * Installing Gentoo 2005.0: Stage 1 NPTL on a Stage 3 Tarball[17] 16. http://forums.gentoo.org/viewtopic-t-334276.html 17. http://forums.gentoo.org/viewtopic-t-319349.html gentoo-dev ---------- Splitting up dev-perl (phase one of a million) Michael Cummings[18] brings good news from the perl camp: "This weekend I intend to start splitting dev-perl into sub categories, starting with perl-core. If anyone doesn't think there are enough packages in the current dev-perl, resync your tree because it's been years since the last time you did :) perl-core will contain ebuilds for those modules that are also distributed with the core installs of perl (though versions and patches may vary from the version you have installed). Anyone wishing to provide input on this multi-phased migration can always post on bug 75435 [19]" 18. [email protected] 19. http://bugs.gentoo.org/show_bug.cgi?id=75435 * Splitting up dev-perl [20] 20. http://thread.gmane.org/gmane.linux.gentoo.devel/27699 Certified Gentoo? An interested Gentooist who works with IBM hardware asks what can be done to get Gentoo IBM-certified. Other Gentooists join in with their questions how to get Gentoo certified for other commercial software. It seems that IBM will only certify distributions that have a commercial backend (because of Service Level Agreements etc.), but it is always good to see people trying to take Gentoo to the next level. * Certified Gentoo? [21] 21. http://thread.gmane.org/gmane.linux.gentoo.devel/27626 Portage as a secondary package manager Since Portage can do software management quite well, why not use it on other distros for your own customizations? A similar thought must have motivated this GLEP draft that wants to enhance portage to be able to install and manage software in arbitrary locations, and also as a secondary package manager when rpm just isn't good enough. * Portage as a secondary package manager [22] 22. http://thread.gmane.org/gmane.linux.gentoo.devel/27569 ======================= 4. Gentoo International ======================= Belgium: Gentoo website brought online -------------------------------------- Last Sunday, Gentoo developer Jochen Maes[23] has set up a server that hosts Gentoo's regional Belgian web presence[24]. As many of the other country-specific Gentoo community sites, this one also has a number of features besides syndicalised content from the official Gentoo website, including a user forum, photo gallery and other community functions. The site is so new that it doesn't even have a logo of its own yet, hence a call for contributions to a logo contest held until the end of the month. A special section in the forum has been set aside for this purpose, check the site for instructions. 23. [email protected] 24. http://www.gentoo.be/ Canada: Elementary school Gentoo LTSP installation -------------------------------------------------- Cory Oldford is the vice-president of Prairie Linux User Group[25] and manager for a remarkable community project in Winnipeg. His group was approached some time ago[26] to switch a lab at a local private elementary school to Gentoo Linux. The lab consisted of about 30 workstations ranging from a P75 with 16MB RAM to a handful of PIII 667mhz with 128MB RAM. The machines were constantly plagued with issues caused by hardware failures and outdated operating systems and software. 25. http://plug.ca 26. 20050110-newsletter.xml#doc_chap5 It was originally thought the PIIIs wouldn't be able to handle the workload, and that administering several LTSP servers would be too cumbersome. The solution devised by the HC-Linux team [27] (as in "Holy Cross", the name of the school) was an openMosix-enabled LTSP, Gentoo Linux server. After the server's filesystem was built, however, the administrator at the school scraped up much more suitable server hardware, an AMD Sempron 2500 with 1.2GB of RAM. 27. http://plug.ca/article.php?story=20050410105433363 openMosix worked great for a time, says Cory, but in the class room environment it turned into a liability, because students would insist on powering off the machines. Currently openMosix is disabled, but could be fired up anytime simply by starting the service. The diskless clients don't share their own load, so they just wait for openMosix on the server to farm out processes anyway. LTSP[28] functioned as expected after a few network issues were resolved, but the desired desktop environment presented a challenge at first: The memory requirements of up to 30 instances of KDE and Konqueror caused the server to start swapping under load. With only one slow 40GB IDE drive, the performance of the server went down dramatically when 30 students were working in the lab. Switching to icewm and a simplified (kludged) ROX-Filer resolved this. The switch to a less voracious desktop environment also left enough RAM to precache the major applications and related libraries on a RAM disk for a greater performance boost. 28. http://ltsp.org The HC-Linux PLUGgers get called in for minor issues from time to time, but the server has been running reliably for months now. Cory is grateful for the support he received from the community: "Thanks to Michael Imhof[29] and the rest of the cluster team, and to all the other Gentoo developers for their hard work." 29. [email protected] Figure 4.1: Gentoo on historic hardware - Pentium 75MHz with 16MB RAM http://www.gentoo.org/images/gwn/200505009_winnipeg.jpg Note: Photo courtesy of Cory Oldford ====================== 5. Gentoo in the press ====================== Coyotegulch (2 May 2005) ------------------------ Last week Scott Robert Ladd[30], the author of a tool for compiler analysis called Acovea[31], conducted a benchmarking test[32] to compare the performance of both compilation and compilate using the GNU C compiler (gcc) version 3.4.3, and the new 4.0 that Was released just two weeks ago. "No matter which compiler options I choose, someone is likely to send me e-mail telling me I got it all wrong," says the author of the review, fully aware of the pitfalls of benchmarking, and he also refrains from comparing gcc with Intel's or other commercial C compilers. The platforms he uses for the benchmark test are an AMD64 Dual Opteron and a plain x86 Pentium 4 host -- both running Gentoo Linux, which he's unlikely to recompile with 4.0 right away: "Version 4.0.0 is laying a foundation for the future, and should be seen as a technological step forward with new internal architectures and the addition of Fortran 95. If you compile a great deal of C++, you'll want to investigate GCC 4.0," says Scott Ladd. If that's not the case, looks like the 3.4 series is still the way to go. 30. [email protected] 31. http://www.coyotegulch.com/products/acovea/index.html 32. http://www.coyotegulch.com/reviews/gcc4/index.html Desktoplinux (8 May 2005) ------------------------- The survey results[33] of Desktoplinux' annual reader poll show a remarkable decline in the number of respondents, an inexplicable disappearance of about two thirds of the Debian user community, and a comfortable growth of Gentoo to about twice the market share of 2003, up at 10 percent of all desktop Linux installations chez Desktoplinux readers. There is, however, room for belief that there may be a fairly large portion of market reality not covered by this particular research. 33. http://www.desktoplinux.com/articles/AT2127420238.html =========================== 6. Moves, adds, and changes =========================== Moves ----- The following developers recently left the Gentoo team: * None this week Adds ---- The following developers recently joined the Gentoo Linux team: * Duncan Coutts (dcoutts) - Haskell Changes ------- The following developers recently changed roles within the Gentoo Linux project: * Tobias Scherbaum (dertobi123) - joined the PPC team * Bryan Ostergaard (kloeri) - new Alpha architecture co-lead ================== 7. Gentoo security ================== Sylpheed, Sylpheed-claws: Buffer overflow on message display ------------------------------------------------------------ Sylpheed and Sylpheed-claws contain a vulnerability that can be triggered when displaying messages with specially crafted attachments. For more information, please see the GLSA Announcement[34] 34. http://www.gentoo.org/security/en/glsa/glsa-200504-02.xml Dnsmasq: Poisoning and Denial of Service vulnerabilities -------------------------------------------------------- Dnsmasq is vulnerable to DNS cache poisoning attacks and a potential Denial of Service from the local network. For more information, please see the GLSA Announcement[35] 35. http://www.gentoo.org/security/en/glsa/glsa-200504-03.xml mit-krb5: Multiple buffer overflows in telnet client ---------------------------------------------------- The mit-krb5 telnet client is vulnerable to two buffer overflows, which could allow a malicious telnet server operator to execute arbitrary code. For more information, please see the GLSA Announcement[36] 36. http://www.gentoo.org/security/en/glsa/glsa-200504-04.xml Gaim: Denial of Service issues ------------------------------ Gaim contains multiple vulnerabilities that can lead to a Denial of Service. For more information, please see the GLSA Announcement[37] 37. http://www.gentoo.org/security/en/glsa/glsa-200504-05.xml sharutils: Insecure temporary file creation ------------------------------------------- The unshar utility is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files. For more information, please see the GLSA Announcement[38] 38. http://www.gentoo.org/security/en/glsa/glsa-200504-06.xml =========== 8. Bugzilla =========== Summary ------- * Statistics * Closed bug ranking * New bug rankings Statistics ---------- The Gentoo community uses Bugzilla (bugs.gentoo.org[39]) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 01 May 2005 and 08 May 2005, activity on the site has resulted in: 39. http://bugs.gentoo.org * 833 new bugs during this period * 433 bugs closed or resolved during this period * 27 previously closed bugs were reopened this period Of the 8576 currently open bugs: 95 are labeled 'blocker', 219 are labeled 'critical', and 629 are labeled 'major'. Closed bug rankings ------------------- The developers and teams who have closed the most bugs during this period are: * Gentoo Games[40], with 25 closed bugs[41] * AMD64 Porting Team[42], with 25 closed bugs[43] * media-video herd[44], with 21 closed bugs[45] * Gentoo's Team for Core System packages[46], with 19 closed bugs[47] * PHP Bugs[48], with 17 closed bugs[49] * Jeremy Huddleston[50], with 14 closed bugs[51] * Gentoo Sound Team[52], with 13 closed bugs[53] * Xavier Neys[54], with 13 closed bugs[55] 40. [email protected] 41. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2005-05-01&chfieldto=2005-05-08&resolution=FIX ED&[email protected] 42. [email protected] 43. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2005-05-01&chfieldto=2005-05-08&resolution=FIX ED&[email protected] 44. [email protected] 45. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2005-05-01&chfieldto=2005-05-08&resolution=FIX ED&[email protected] 46. [email protected] 47. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2005-05-01&chfieldto=2005-05-08&resolution=FIX ED&[email protected] 48. [email protected] 49. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2005-05-01&chfieldto=2005-05-08&resolution=FIX ED&[email protected] 50. [email protected] 51. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2005-05-01&chfieldto=2005-05-08&resolution=FIX ED&[email protected] 52. [email protected] 53. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2005-05-01&chfieldto=2005-05-08&resolution=FIX ED&[email protected] 54. [email protected] 55. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2005-05-01&chfieldto=2005-05-08&resolution=FIX ED&[email protected] New bug rankings ---------------- The developers and teams who have been assigned the most new bugs during this period are: * Gentoo Linux Gnome Desktop Team[56], with 31 new bugs[57] * Gentoo KDE team[58], with 16 new bugs[59] * Gentoo Sound Team[60], with 15 new bugs[61] * AMD64 Porting Team[62], with 10 new bugs[63] * Gentoo Science Related Packages[64], with 9 new bugs[65] * Gentoo Release Team[66], with 9 new bugs[67] * Python Gentoo Team[68], with 8 new bugs[69] * Netmon Herd[70], with 8 new bugs[71] 56. [email protected] 57. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2005-05-01&chfieldto=2005-05 -08&[email protected] 58. [email protected] 59. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2005-05-01&chfieldto=2005-05 -08&[email protected] 60. [email protected] 61. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2005-05-01&chfieldto=2005-05 -08&[email protected] 62. [email protected] 63. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2005-05-01&chfieldto=2005-05 -08&[email protected] 64. [email protected] 65. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2005-05-01&chfieldto=2005-05 -08&[email protected] 66. [email protected] 67. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2005-05-01&chfieldto=2005-05 -08&[email protected] 68. [email protected] 69. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2005-05-01&chfieldto=2005-05 -08&[email protected] 70. [email protected] 71. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2005-05-01&chfieldto=2005-05 -08&[email protected] =============== 9. GWN feedback =============== Please send us your feedback[72] and help make the GWN better. 72. [email protected] ================================ 10. GWN subscription information ================================ To subscribe to the Gentoo Weekly Newsletter, send a blank email to [email protected]. To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to [email protected] from the email address you are subscribed under. =================== 11. Other languages =================== The Gentoo Weekly Newsletter is also available in the following languages: * Danish[73] * Dutch[74] * English[75] * German[76] * French[77] * Japanese[78] * Italian[79] * Polish[80] * Portuguese (Brazil)[81] * Portuguese (Portugal)[82] * Russian[83] * Spanish[84] * Turkish[85] 73. http://www.gentoo.org/news/da/gwn/gwn.xml 74. http://www.gentoo.org/news/nl/gwn/gwn.xml 75. http://www.gentoo.org/news/en/gwn/gwn.xml 76. http://www.gentoo.org/news/de/gwn/gwn.xml 77. http://www.gentoo.org/news/fr/gwn/gwn.xml 78. http://www.gentoo.org/news/ja/gwn/gwn.xml 79. http://www.gentoo.org/news/it/gwn/gwn.xml 80. http://www.gentoo.org/news/pl/gwn/gwn.xml 81. http://www.gentoo.org/news/pt_br/gwn/gwn.xml 82. http://www.gentoo.org/news/pt/gwn/gwn.xml 83. http://www.gentoo.org/news/ru/gwn/gwn.xml 84. http://www.gentoo.org/news/es/gwn/gwn.xml 85. http://www.gentoo.org/news/tr/gwn/gwn.xml Ulrich Plate <[email protected]> - Editor Patrick Lauer <[email protected]> - Author Cory Oldford <> - Author -- [email protected] mailing list