Gentoo Weekly Newsletter 26 September 2005
Ulrich Plate <[email protected]> Mon, 26 Sep 2005 22:15:03 +0200
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
-------------------------------------------------------------------------= -- Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/current.xml This is the Gentoo Weekly Newsletter for the week of 26 September 2005. -------------------------------------------------------------------------= -- =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 1. Gentoo news =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 New IRC channel for ebuilders ----------------------------- =20 A new IRC channel, #gentoo-dev-help, is being officially announced as a=20 place for prospective developers, ebuild authors, bug hunters, and the=20 like to gather and trade tips and tricks about Gentoo's best practices.=20 This channel has been newly established on irc.freenode.net since many=20 people don't have a voice in #gentoo-dev, and to relieve the questions=20 that are being posed in #gentoo-portage. The creators hope to attract=20 Gentoo users, potential developers, and prospective arch testers who have= =20 questions that are more in-depth than a high volume channel like #gentoo=20 can answer, without distracting the busy Gentoo developers from their cor= e=20 activities. Any developers interested in passing on their skills are=20 welcome to come and join the new channel. In the interest of staying on=20 topic all installation questions will be referred back to #gentoo, but al= l=20 other Gentoo-related issues are fair game.=20 =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 2. Heard in the community =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Web forums ---------- =20 Apache blowout =20 Forum regular loki99[1] had a busy Saturday trying to contain the fury of= =20 those who got angered by the latest Apache upgrade in Gentoo Linux.=20 Whether you agree with its provocative title or not, the thread is=20 definitely worth watching as it has Gentoo developer Bryan =C3=98stergaar= d[2]=20 chiming in with a thorough explanation of what went up and why:=20 1. https://forums.gentoo.org/profile.php?mode=3Dviewprofile&u=3D32005 2. [email protected] =20 * Gentoo Apache2 Config Change Idiocy[3]=20 3. https://forums.gentoo.org/viewtopic-t-384368.html =20 KDE 3.5 beta-ebuilds test thread =20 Gentoo developer Chris White[4] rounds up a group of testers for the=20 release of KDE 3.5, check the sticky mini-HOWTO for details on how to=20 participate:=20 4. [email protected] =20 * Testing kde-3.5_beta1 small howto[5] 5. https://forums.gentoo.org/viewtopic-t-380632.html =20 gentoo-dev ---------- =20 Marking packages stable on x86 =20 As a consequence of GLEP40 and the new x86 arch team the policy for=20 stabling packages on x86 has changed. For endusers this will most likely=20 have no side-effects except that packages are expected to become stable i= n=20 a more timely fashion.=20 =20 * Marking packages stable on x86[6]=20 6. http://thread.gmane.org/gmane.linux.gentoo.devel/31758 =20 Vice and virtues of static libraries =20 A long thread about the pros and cons of having static libraries around,=20 also some packages that show "unexpected" behaviour ("if static ncurses i= s=20 unavailable, the bash ebuild will use the bundled gnutermcap (which is=20 bad)"). You will also find a short discussion on whether to use a new=20 USE-flag for it (or maybe abuse USE=3D"minimal"?).=20 =20 * Say no to static libraries! (?)[7]=20 7. http://thread.gmane.org/gmane.linux.gentoo.devel/31726 =20 "Commercial" software in portage =20 Every now and then GLEP 23 gets resurrected - which means that some peopl= e=20 want to be able to disallow packagess based on the license. Especially=20 non-free software with restrictions on the data files would be nice to=20 have a warning ("You need the original Game-CD to install this!"), but as= =20 long as portage doesn't implement GLEP 23 any changes to current behaviou= r=20 will be a bit patchy. Some ideas like overlays (split out all non-free=20 ebuilds) were discussed and mostly dismissed.=20 =20 * Commercial software in Portage[8]=20 8. http://thread.gmane.org/gmane.linux.gentoo.devel/ =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 3. Gentoo international =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Germany: Gentoo developer conference call for papers ---------------------------------------------------- =20 A reminder for all those actively considering a paper presentation at the= =20 European conference for Gentoo developers[9] in November: please submit=20 your proposals before 30 September. The same form used for registering to= =20 the event[10] can be used for submissions of topics and brief outlines of= =20 planned presentation.=20 9. http://conference.gentoo.org 10. http://conference.gentoo.org/cgi-bin/registration.pl =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 4. Gentoo in the press =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 The Register (23 September 2005) -------------------------------- =20 In a letter to the editor[11], weathered sysadmin Eoin refutes the idea o= f=20 a Windows-only standard for operating systems on USB sticks that the The=20 Register had been reporting about earlier. "Your article regarding the ne= w=20 U3 standard was mostly correct, baring your final assertion that Linux=20 does not support this. As far as I can tell the idea actually evolved fro= m=20 the Linux heads," writes Eoin, happily acknowledging that whenever one of= =20 those Linux heads with distros on a stick visits his offices, they=20 generally know what they're doing: "These people are using 2-4GB USB=20 drives with almost complete versions of Gentoo and Red Hat running on the= m=20 - all very impressive and thankfully I don't need to attempt (and fail) t= o=20 support them if something goes wrong."=20 11. http://www.theregister.co.uk/2005/09/23/letters_2309/ =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D 5. Moves, adds, and changes =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D =20 Moves ----- =20 The following developers recently left the Gentoo team:=20 =20 * None this week=20 =20 Adds ---- =20 The following developers recently joined the Gentoo Linux team:=20 =20 * None this week=20 =20 Changes ------- =20 The following developers recently changed roles within the Gentoo Linux=20 project: =20 * Daniel Gryniewicz (dang) - operational lead for AMD64 arch testers =20 =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 6. Gentoo Security =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Apache, mod_ssl: Multiple vulnerabilities ----------------------------------------- =20 mod_ssl and Apache are vulnerable to a restriction bypass and a potential= =20 local privilege escalation.=20 =20 For more information, please see the GLSA Announcement[12]=20 12. http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml =20 Clam AntiVirus: Multiple vulnerabilities ---------------------------------------- =20 Clam AntiVirus is subject to vulnerabilities ranging from Denial of=20 Service to execution of arbitrary code when handling compressed=20 executables.=20 =20 For more information, please see the GLSA Announcement[13]=20 13. http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml =20 Zebedee: Denial of Service vulnerability ---------------------------------------- =20 A bug in Zebedee allows a remote attacker to perform a Denial of Service=20 attack.=20 =20 For more information, please see the GLSA Announcement[14]=20 14. http://www.gentoo.org/security/en/glsa/glsa-200509-14.xml =20 util-linux: umount command validation error ------------------------------------------- =20 A command validation error in umount can lead to an escalation of=20 privileges.=20 =20 For more information, please see the GLSA Announcement[15]=20 15. http://www.gentoo.org/security/en/glsa/glsa-200509-15.xml =20 Mantis: XSS and SQL injection vulnerabilities --------------------------------------------- =20 Mantis is affected by an SQL injection and several cross-site scripting=20 (XSS) vulnerabilities.=20 =20 For more information, please see the GLSA Announcement[16]=20 16. http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml =20 Webmin, Usermin: Remote code execution through PAM authentication ----------------------------------------------------------------- =20 If Webmin or Usermin is configured to use full PAM conversations, it is=20 vulnerable to the remote execution of arbitrary code with root privileges= .=20 =20 For more information, please see the GLSA Announcement[17]=20 17. http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 7. Bugzilla =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Summary ------- =20 * Statistics=20 * Closed bug ranking=20 * New bug rankings=20 =20 Statistics ---------- =20 The Gentoo community uses Bugzilla (bugs.gentoo.org[18]) to record and=20 track bugs, notifications, suggestions and other interactions with the=20 development team. Between 18 September 2005 and 25 September 2005,=20 activity on the site has resulted in:=20 18. http://bugs.gentoo.org =20 * 798 new bugs during this period=20 * 366 bugs closed or resolved during this period=20 * 39 previously closed bugs were reopened this period=20 =20 Of the 8405 currently open bugs: 98 are labeled 'blocker', 189 are labele= d=20 'critical', and 554 are labeled 'major'.=20 =20 Closed bug rankings ------------------- =20 The developers and teams who have closed the most bugs during this period= =20 are:=20 =20 * AMD64 Porting Team[19], with 23 closed bugs[20] =20 * Gentoo KDE team[21], with 22 closed bugs[22] =20 * Gentoo Linux Gnome Desktop Team[23], with 18 closed bugs[24] =20 * Gentoo for Mac OS X[25], with 17 closed bugs[26] =20 * Gentoo Security[27], with 13 closed bugs[28] =20 * Gentoo Team for the ML programming language family[29], with 13 closed= =20 bugs[30] =20 * PPC Porters[31], with 12 closed bugs[32] =20 * Gentoo net-p2p team[33], with 12 closed bugs[34] =20 19. [email protected] 20.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2005-09-18&chfieldto=3D2005-09-25&= resolution=3DFIXED&[email protected] 21. [email protected] 22.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2005-09-18&chfieldto=3D2005-09-25&= resolution=3DFIXED&[email protected] 23. [email protected] 24.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2005-09-18&chfieldto=3D2005-09-25&= resolution=3DFIXED&[email protected] 25. [email protected] 26.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2005-09-18&chfieldto=3D2005-09-25&= resolution=3DFIXED&[email protected] 27. [email protected] 28.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2005-09-18&chfieldto=3D2005-09-25&= resolution=3DFIXED&[email protected] 29. [email protected] 30.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2005-09-18&chfieldto=3D2005-09-25&= resolution=3DFIXED&[email protected] 31. [email protected] 32.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2005-09-18&chfieldto=3D2005-09-25&= resolution=3DFIXED&[email protected] 33. [email protected] 34.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2005-09-18&chfieldto=3D2005-09-25&= resolution=3DFIXED&[email protected] =20 New bug rankings ---------------- =20 The developers and teams who have been assigned the most new bugs during=20 this period are:=20 =20 * Default Assignee for New Packages[35], with 30 new bugs[36] =20 * Perl Devs @ Gentoo[37], with 20 new bugs[38] =20 * Gentoo Sound Team[39], with 9 new bugs[40] =20 * Gentoo KDE team[41], with 9 new bugs[42] =20 * Gentoo Linux Gnome Desktop Team[43], with 8 new bugs[44] =20 * Text-Markup Team[45], with 7 new bugs[46] =20 * Gentoo Games[47], with 7 new bugs[48] =20 * Gentoo X-windows packagers[49], with 6 new bugs[50] =20 35. [email protected] 36.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-09-18&chf= ieldto=3D2005-09-25&[email protected] 37. [email protected] 38.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-09-18&chf= ieldto=3D2005-09-25&[email protected] 39. [email protected] 40.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-09-18&chf= ieldto=3D2005-09-25&[email protected] 41. [email protected] 42.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-09-18&chf= ieldto=3D2005-09-25&[email protected] 43. [email protected] 44.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-09-18&chf= ieldto=3D2005-09-25&[email protected] 45. [email protected] 46.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-09-18&chf= ieldto=3D2005-09-25&[email protected] 47. [email protected] 48.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-09-18&chf= ieldto=3D2005-09-25&[email protected] 49. [email protected] 50.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-09-18&chf= ieldto=3D2005-09-25&[email protected] =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 8. GWN feedback =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Please send us your feedback[51] and help make the GWN better.=20 51. [email protected] =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D 9. GWN subscription information =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D =20 To subscribe to the Gentoo Weekly Newsletter, send a blank email to=20 [email protected].=20 =20 To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to=20 [email protected] from the email address you are=20 subscribed under. =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 10. Other languages =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 The Gentoo Weekly Newsletter is also available in the following languages= : =20 * Danish[52] =20 * Dutch[53] =20 * English[54] =20 * German[55] =20 * French[56] =20 * Japanese[57] =20 * Italian[58] =20 * Polish[59] =20 * Portuguese (Brazil)[60] =20 * Portuguese (Portugal)[61] =20 * Russian[62] =20 * Spanish[63] =20 * Turkish[64] =20 52. http://www.gentoo.org/news/da/gwn/gwn.xml 53. http://www.gentoo.org/news/nl/gwn/gwn.xml 54. http://www.gentoo.org/news/en/gwn/gwn.xml 55. http://www.gentoo.org/news/de/gwn/gwn.xml 56. http://www.gentoo.org/news/fr/gwn/gwn.xml 57. http://www.gentoo.org/news/ja/gwn/gwn.xml 58. http://www.gentoo.org/news/it/gwn/gwn.xml 59. http://www.gentoo.org/news/pl/gwn/gwn.xml 60. http://www.gentoo.org/news/pt_br/gwn/gwn.xml 61. http://www.gentoo.org/news/pt/gwn/gwn.xml 62. http://www.gentoo.org/news/ru/gwn/gwn.xml 63. http://www.gentoo.org/news/es/gwn/gwn.xml 64. http://www.gentoo.org/news/tr/gwn/gwn.xml =20 Ulrich Plate <[email protected]> - Editor Patrick Lauer <[email protected]> - Author Tres Melton <[email protected]> - Author --=20 [email protected] mailing list