Gentoo Weekly Newsletter 7 November 2005
Lars Weiler <[email protected]> Mon, 7 Nov 2005 01:00:49 +0100
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
-------------------------------------------------------------------------= -- Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/current.xml This is the Gentoo Weekly Newsletter for the week of 7 November 2005. -------------------------------------------------------------------------= -- =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 1. Gentoo news =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D New GLEP to manage important update information ----------------------------------------------- One of the longest-standing discussions between Gentoo developers and users centers around the little einfo warnings that are being displayed briefly whenever you emerge a package that contains crucial additional information on how to upgrade things, and what configuration files to watch out for. They're important, very much so, but in essence useful onl= y to those who watch a compilation scroll past their screens, and despite several earlier efforts have never been made to stick around other places in Portage to be consulted later, at leisure, after a lengthy update of several packages at once. Now Ciaran McCreesh[1] has set out for yet another attempt at solving this problem: He is the author of a formal proposal[2] for an automatic distribution system for critical news that i= s to complement existing Gentoo information channels (Forums, gentoo-announce mailing list, website and the GWN), but aims to be part o= f Portage itself in order to get pushed out to Gentoo users without them having to pull anything in. 1. [email protected] 2. http://www.gentoo.org/proj/en/glep/glep-0042.html =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 2. User stories =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Interview with Jacob Lindberg, a Linux Specialist for Brenntag Nordic --------------------------------------------------------------------- Figure 2.1: Jacob Lindberg, Linux Specialist for Brenntag Nordic http://www.gentoo.org/images/gwn/20051107_jacob.jpg Who are you and where do you work? I'm Jacob Lindberg, 30 years old working as a Linux Specialist for Brenntag Nordic in Denmark since March 2004. I recently got married, have no kids, but a dog and 2 blue-russian cats, Phoebe and Joey, named after Friends (the comedy). Brenntag Nordic has offices and plants in Denmark, Sweden, Norway and Finland and is a part of the Brenntag Group. They consolidated a lot of their servers[3] to Linux in 2003. Unfortunately the cost of external consultants was very high, services went down from time to time, and the consultants didn't have the knowledge to fix the various problems. The solutions were based on SuSE. As an old FreeBSD man, I don't like anythin= g in binaries. I want my stuff from source and configurable. And as a lot o= f other Linux guys I have been through the hell of RPM dependencies. No more! This is why way back Gentoo caught my attention, and it has never left it since. 3. http://www-306.ibm.com/software/success/cssdb.nsf/CS/DNSD-5QJENP Where do you use Gentoo? What did it replace? We have no Linux servers not running Gentoo, so it's everywhere that's possible. We got the following services from Gentoo: * Samba, doing PDC, fileserver and Image server * Squid, doing proxy and filtering * Postfix and spamassassin, scanning all incoming and outgoing emails * Bind9, running our dns internally and externally * IPtables, running as firewall between our datacenter and our 10 locations (clients) * rsync, doing our Gentoo mirror * proftpd and tftp, doing images for Cisco equipment and such * Backup server * Log server Why do you use POWER4/5 machines? Our iSeries machines are running SAP and Lotus Notes in the OS400 environment. The rest are Linux LPARs (logical partitions). In the new year we will exchange the 870 with an 570 (i5), so everything is changed to POWER5. The future plan is after changing to POWER5 we have a lot more power and are able to supply more services. The reason for using IBM hardware is that it's rock stable =E2=80=93 and we have the opportunity t= o run things directly from the OS400 also. It's not easy to get something running on fairly non-documented architecture (iSeries on PPC64) which was the situation back in early 2004. I started out with a pSeries LiveCD which didn't work at all. After some tricks, and some help from the community I managed to get a nws working which contained the LiveCD, and a kernel in the IFS. Now I could boot Gentoo. This was done on my old 270 (RS/6000 processor as far as I remember). This was quickly adapted to the 825 (POWER4) and 870 (POWER4). Today the 2005.0 and 2005.1 LiveCD are working on the i5 machines, but still not on the 825 and 870 machine. The difference between x86 and PPC64 is mostly when installing and configuring, especially the kernel. All your environment has to be configured correctly for the PPC64 to work also. When working inside Gentoo you don't see any big difference except uname returns another architecture. This is because of the way Gentoo works. Where does Gentoo need improvement? I'm applying to become a member of the PPC64 developer team. In this way, I can be a part of the improvement. I think the GLEP webpage[4] shows som= e nice features for the future. 4. http://glep.gentoo.org What are your experiences with the Gentoo community? It's amazing how many people are contributing to the community. This is why I want to do it also. But my experience is that it's hard to find a problem which can't be solved with the help from the community. So it's very positive. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 3. Heard in the community =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D gentoo-dev ---------- Getting important updates to users One of the largest threads of the last week split into four subthreads. The heated discussion revolved around a central problem that has not received the needed attention for a long time: How do you make sure that users get important information about updates, changes etc.? We have the gentoo.org website, an RSS feed, the GWN, emerge messages etc. - but ther= e is no central authorative sources for updates. The GLEP proposals by Chri= s White[5] and Ciaran McCreesh[6] drifted away into a very heated dicsussio= n (a flamewar one might say) about XML and other things. 5. [email protected] 6. [email protected] * Getting important updates to users[7] * GLEP 42 (Was: Getting Important Updates To Users) [8] * GLEP ??: Critical News Reporting [9] * GLEP 42 "Critical News Reporting" Round Two [10] 7. http://thread.gmane.org/gmane.linux.gentoo.devel/32380 8. http://thread.gmane.org/gmane.linux.gentoo.devel/32427 9. http://thread.gmane.org/gmane.linux.gentoo.devel/32438 10. http://thread.gmane.org/gmane.linux.gentoo.devel/32657 Proposed changes to base profile for Gentoo/ALT Diego Petten=C3=B2[11] offers some patches to the profiles so that the ba= se profile is more generic and some linux-specific things are moved away fro= m the "base" profile to "default-linux". This is another step on the way to integrate Gentoo/BSD. 11. [email protected] * Proposed changes to base profile for Gentoo/ALT [12] 12. http://thread.gmane.org/gmane.linux.gentoo.devel/32507 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 4. Gentoo international =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Italy: GeCHI conference in November ----------------------------------- 26 November 2005 is going to be the date for the 5th time that Italy's open-source movement organizes a national Linux Day, and the 3rd time tha= t this Italy-wide event is a chance for the ever-growing Italian Gentoo users community to prepare for some evangelism of their own. This year th= e 3rd national meeting called Gentoo Day will be organized in collaboration with the VELug[13] (Venice Free Software Users Group). Thanks to the support of the local authorities, the location of this year's meeting wil= l be Villa Franchin, Viale Garibaldi 155 (quartiere Carpenedo-Bissuola), in the city of Mestre, near Venice. 13. http://www.velug.it Gentooists active in the Gentoo Channel Italia[14] (GeCHI) framework will present some talks about different topics starting from an "Introduction to Gentoo", to "Gentoo Linux Installer" to "Having fun with Gentoo" endin= g with "Gimp: From 0 to Dal=C3=AC". There will be the possibility to buy so= me new cool gadgets, like the world-famous GeCHI T-Shirt or some stickers and posters. 14. http://www.gechi.it Don't miss this chance to meet and mingle with other Italian Gentoo users and developers! If you want to join the GeCHI in this endeavour check thi= s Forum thread[15] and the GeCHI's own forum[16] (both links in Italian)." 15. http://forums.gentoo.org/viewtopic-p-2853724.html 16. http://www.gechi.it/forums/viewtopic.php?p=3D1632 Japan: GentooJP receives Andrea Barisani ---------------------------------------- The GentooJP crowd[17] will play cicerone to visiting Gentoo developer Andrea Barisani[18] with a nite-seeing tour of the more indigenous back alleys of Tokyo's Shibuya district, on the schedule for Sunday, 13 November 2005. Andrea is in town for a presentation at the PacSec conference[19], and if you would like to join the outing, make sure you'r= e at the Hachiko statue in front of Shibuya station by 18:30 hours. 17. http://www.gentoo.gr.jp 18. [email protected] 19. http://www.gentoo.org/news/en/gwn/20051003-newsletter.xml#doc_chap2_= sect2 Note: Confirm your participation by sending a short note to the [email protected] mailing list, please. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 5. Gentoo in the press =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Desktop Linux (4 November 2005) ------------------------------- A new book from O'Reilly, the Linux Desktop Pocket Reference[20], provide= s a concise overview of the "five most popular distributions" listed in alphabetical order, Gentoo after Fedora, and followed by Mandriva, SUSE and Ubuntu. Author David Brickner tries to cut through the undergrowth of too much information that he finds "hard to sift through it all, to know what is accurate and what is up-to-date," and which he identifies as the "biggest obstacle to faster adoption of Linux on the desktop." Chapter 1 containing a comparison of the five distributions is available as a PDF sample document[21], and provides a particularly enthusiastic assessment of Gentoo's main assets: Portage and the documentation. 20. http://www.desktoplinux.com/news/NS6574473318.html 21. http://www.oreilly.com/catalog/linuxdesktoppr/chapter/ch01.pdf =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 6. Gentoo developer moves =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Moves ----- The following developers recently left the Gentoo project: * None this week Adds ---- The following developers recently joined the Gentoo project: * Markus Dittrich (markusle) - app-sci * Michael Cummings (mcummings - reinstalled after leaving two months ago= ) - perl * Alexey Chumakov (achumakov) - Russian translation Changes ------- The following developers recently changed roles within the Gentoo project= : * None this week =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 7. Gentoo Security =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D libgda: Format string vulnerabilities ------------------------------------- Two format string vulnerabilities in libgda may lead to the execution of arbitrary code. For more information, please see the GLSA Announcement[22] 22. http://www.gentoo.org/security/en/glsa/glsa-200511-01.xml QDBM, ImageMagick, GDAL: RUNPATH issues --------------------------------------- Multiple packages suffer from RUNPATH issues that may allow users in the "portage" group to escalate privileges. For more information, please see the GLSA Announcement[23] 23. http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml giflib: Multiple vulnerabilities -------------------------------- giflib may dereference NULL or write out of bounds when processing malformed images, potentially resulting in Denial of Service or arbitrary code execution. For more information, please see the GLSA Announcement[24] 24. http://www.gentoo.org/security/en/glsa/glsa-200511-03.xml libgda: Format string vulnerabilities ------------------------------------- Two format string vulnerabilities in libgda may lead to the execution of arbitrary code. For more information, please see the GLSA Announcement[25] 25. http://www.gentoo.org/security/en/glsa/glsa-200511-01.xml QDBM, ImageMagick, GDAL: RUNPATH issues --------------------------------------- Multiple packages suffer from RUNPATH issues that may allow users in the "portage" group to escalate privileges. For more information, please see the GLSA Announcement[26] 26. http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml giflib: Multiple vulnerabilities -------------------------------- giflib may dereference NULL or write out of bounds when processing malformed images, potentially resulting in Denial of Service or arbitrary code execution. For more information, please see the GLSA Announcement[27] 27. http://www.gentoo.org/security/en/glsa/glsa-200511-03.xml ClamAV: Multiple vulnerabilities -------------------------------- ClamAV has many security flaws which make it vulnerable to remote execution of arbitrary code and a Denial of Service. For more information, please see the GLSA Announcement[28] 28. http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml GNUMP3d: Directory traversal and XSS vulnerabilities ---------------------------------------------------- GNUMP3d is vulnerable to directory traversal and cross-site scripting attacks that may result in information disclosure or the compromise of a browser. For more information, please see the GLSA Announcement[29] 29. http://www.gentoo.org/security/en/glsa/glsa-200511-05.xml fetchmail: Password exposure in fetchmailconf --------------------------------------------- fetchmailconf fails to properly handle file permissions, temporarily exposing sensitive information to other local users. For more information, please see the GLSA Announcement[30] 30. http://www.gentoo.org/security/en/glsa/glsa-200511-06.xml OpenVPN: Multiple vulnerabilities --------------------------------- The OpenVPN client is potentially vulnerable to the execution of arbitrar= y code and the OpenVPN server is vulnerable to a Denial of Service issue. For more information, please see the GLSA Announcement[31] 31. http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 8. Bugzilla =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Statistics ---------- The Gentoo community uses Bugzilla (bugs.gentoo.org[32]) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 29 October 2005 and 05 November 2005, activity on the site has resulted in: 32. http://bugs.gentoo.org * 756 new bugs during this period * 437 bugs closed or resolved during this period * 36 previously closed bugs were reopened this period Of the 8861 currently open bugs: 99 are labeled 'blocker', 191 are labele= d 'critical', and 552 are labeled 'major'. Closed bug rankings ------------------- The developers and teams who have closed the most bugs during this period are: * Gentoo for Mac OS X[33], with 52 closed bugs[34] * Gentoo Sound Team[35], with 18 closed bugs[36] * media-gfx herd[37], with 14 closed bugs[38] * Gentoo Developers for the x86 Architecture[39], with 12 closed bugs[40= ] * Gentoo Linux Gnome Desktop Team[41], with 12 closed bugs[42] * Gentoo Games[43], with 12 closed bugs[44] * Gentoo Security[45], with 11 closed bugs[46] * Python Gentoo Team[47], with 11 closed bugs[48] 33. [email protected] 34. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3D= CLOSED&chfield=3Dbug_status&chfieldfrom=3D2005-10-29&chfieldto=3D2005-11-= 05&resolution=3DFIXED&[email protected] 35. [email protected] 36. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3D= CLOSED&chfield=3Dbug_status&chfieldfrom=3D2005-10-29&chfieldto=3D2005-11-= 05&resolution=3DFIXED&[email protected] 37. [email protected] 38. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3D= CLOSED&chfield=3Dbug_status&chfieldfrom=3D2005-10-29&chfieldto=3D2005-11-= 05&resolution=3DFIXED&[email protected] 39. [email protected] 40. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3D= CLOSED&chfield=3Dbug_status&chfieldfrom=3D2005-10-29&chfieldto=3D2005-11-= 05&resolution=3DFIXED&[email protected] 41. [email protected] 42. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3D= CLOSED&chfield=3Dbug_status&chfieldfrom=3D2005-10-29&chfieldto=3D2005-11-= 05&resolution=3DFIXED&[email protected] 43. [email protected] 44. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3D= CLOSED&chfield=3Dbug_status&chfieldfrom=3D2005-10-29&chfieldto=3D2005-11-= 05&resolution=3DFIXED&[email protected] 45. [email protected] 46. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3D= CLOSED&chfield=3Dbug_status&chfieldfrom=3D2005-10-29&chfieldto=3D2005-11-= 05&resolution=3DFIXED&[email protected] 47. [email protected] 48. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3D= CLOSED&chfield=3Dbug_status&chfieldfrom=3D2005-10-29&chfieldto=3D2005-11-= 05&resolution=3DFIXED&[email protected] New bug rankings ---------------- The developers and teams who have been assigned the most new bugs during this period are: * Default Assignee for New Packages[49], with 36 new bugs[50] * GNOME Office[51], with 33 new bugs[52] * Luis Medinas[53], with 24 new bugs[54] * Default Assignee for Orphaned Packages[55], with 10 new bugs[56] * X11 External Driver Maintainers[57], with 9 new bugs[58] * Gentoo Sound Team[59], with 8 new bugs[60] * Mobile Herd[61], with 8 new bugs[62] * Gentoo Science Related Packages[63], with 7 new bugs[64] 49. [email protected] 50. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASS= IGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-10-2= 9&chfieldto=3D2005-11-05&[email protected] 51. [email protected] 52. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASS= IGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-10-2= 9&chfieldto=3D2005-11-05&[email protected] 53. [email protected] 54. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASS= IGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-10-2= 9&chfieldto=3D2005-11-05&[email protected] 55. [email protected] 56. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASS= IGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-10-2= 9&chfieldto=3D2005-11-05&[email protected] 57. [email protected] 58. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASS= IGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-10-2= 9&chfieldto=3D2005-11-05&[email protected] 59. [email protected] 60. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASS= IGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-10-2= 9&chfieldto=3D2005-11-05&[email protected] 61. [email protected] 62. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASS= IGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-10-2= 9&chfieldto=3D2005-11-05&[email protected] 63. [email protected] 64. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASS= IGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2005-10-2= 9&chfieldto=3D2005-11-05&[email protected] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 9. GWN feedback =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Please send us your feedback[65] and help make the GWN better. 65. [email protected] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D 10. GWN subscription information =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D To subscribe to the Gentoo Weekly Newsletter, send a blank email to [email protected]. To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to [email protected] from the email address you are subscribed under. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 11. Other languages =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D The Gentoo Weekly Newsletter is also available in the following languages= : * Danish[66] * Dutch[67] * English[68] * German[69] * French[70] * Korean[71] * Japanese[72] * Italian[73] * Polish[74] * Portuguese (Brazil)[75] * Portuguese (Portugal)[76] * Russian[77] * Spanish[78] * Turkish[79] 66. http://www.gentoo.org/news/da/gwn/gwn.xml 67. http://www.gentoo.org/news/nl/gwn/gwn.xml 68. http://www.gentoo.org/news/en/gwn/gwn.xml 69. http://www.gentoo.org/news/de/gwn/gwn.xml 70. http://www.gentoo.org/news/fr/gwn/gwn.xml 71. http://www.gentoo.org/news/ko/gwn/gwn.xml 72. http://www.gentoo.org/news/ja/gwn/gwn.xml 73. http://www.gentoo.org/news/it/gwn/gwn.xml 74. http://www.gentoo.org/news/pl/gwn/gwn.xml 75. http://www.gentoo.org/news/pt_br/gwn/gwn.xml 76. http://www.gentoo.org/news/pt/gwn/gwn.xml 77. http://www.gentoo.org/news/ru/gwn/gwn.xml 78. http://www.gentoo.org/news/es/gwn/gwn.xml 79. http://www.gentoo.org/news/tr/gwn/gwn.xml Ulrich Plate <[email protected]> - Editor Patrick Lauer <[email protected]> - Author Andrea Perotti <[email protected]> - Author --=20 [email protected] mailing list