Gentoo Weekly Newsletter 13 March 2006
Ulrich Plate <[email protected]> Mon, 13 Mar 2006 08:33:36 +0100
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
-------------------------------------------------------------------------= -- Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/current.xml This is the Gentoo Weekly Newsletter for the week of 13 March 2006. -------------------------------------------------------------------------= -- =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 1. Gentoo news =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Gentoo store: 2006.0 release media available -------------------------------------------- =20 Official 2006.0 CD releases[1] have hit the Gentoo store this week! Five=20 USD from every CD sale goes to the Gentoo Foundation[2], presenting a=20 clever way to financially support the development of Gentoo Linux through= =20 purchasing the release media directly from the project.=20 1. http://www.cafepress.com/officialgentoo/1227454 2. http://foundation.gentoo.org =20 Gentoo community directory -------------------------- =20 It's increasingly difficult to keep track of the multitude of=20 international activities in and around the Gentoo project. Developers,=20 power users and enthusiasts around the globe organize Gentoo-related=20 events, hold classes at their universities, and man Gentoo booths at trad= e=20 fairs and conferences. To keep up with what's going on internationally,=20 the GWN team is actively looking for Gentoo user groups, associations,=20 clubs or study circles that represent users or developers in their own=20 town or country. If you're running a Gentoo-related website, a forum, a=20 monthly user meeting or other events, please submit a short description o= f=20 your activities and your contact details to our feedback address[3] so we= =20 can start setting up a Gentoo community directory. Thanks a lot in=20 advance!=20 3. [email protected] =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 2. Heard in the community =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Web forums ---------- =20 glibc 2.4 =20 glibc 2.4 officially hit the Portage tree. Forum users were surprised to=20 see that it got straight into ~arch instead of being hard masked first.=20 However, they did quite a lot of tests, like rebuilding the toolchain and= =20 all seemed to go well. Some of them even tried it with GCC 4.1 and=20 experienced no problems. Nevertheless, they did find some minor issues=20 when building nptl-only applications:=20 =20 * GLIBC 2.4 now officially in portage[4]=20 4. https://forums.gentoo.org/viewtopic-t-442247.html =20 =20 Forum veteran taskara[5] just released a custom Gentoo LiveCD that=20 provides Xgl support. Users who tried it are rather pleased with that kin= d=20 of 3D hardware support on a LiveCD. Links and torrents are inside the=20 thread, and of course you can discuss it right there:=20 5. https://forums.gentoo.org/profile.php?mode=3Dviewprofile&u=3D90 =20 * Xgl Demo Live CD available (Gentoo based, of course!)[6]=20 6. https://forums.gentoo.org/viewtopic-t-441235.html =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 3. Gentoo international =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 India: Open-source event in Calicut this weekend ------------------------------------------------ =20 Gentoo developer Shyam Mani[7] will give an introductory talk about Gento= o=20 during the FOSS.NITC[8] event at the National Institute of Technology in=20 Calicut (Kerela) on 18 and 19 March. Together with fellow Gentoo=20 enthusiast Ashish V, he plans to hold a Gentoo BoF (Birds of a Feather)=20 session as well sometime during the event. Check the event schedule[9] fo= r=20 details.=20 7. [email protected] 8. http://www.foss.nitc.ac.in/ 9. http://www.foss.nitc.ac.in/web/schedule.html =20 Germany: Gentoo user meeting in Leipzig --------------------------------------- =20 On Friday, 17 March 2006, a group of Gentooists from the Leipzig and Hall= e=20 area in Saxony will meet for an evening at the Stuk[10] (Studentenkeller)= .=20 This first Leipzig GUM will start at 19:00, and if you're interested in=20 attending, please tell the organizers via their Forum thread[11].=20 10. http://www.stuk-leipzig.de/ 11. https://forums.gentoo.org/viewtopic-t-405786.html =20 Germany: Report from Chemnitz ----------------------------- =20 As in 2005, the Linuxtage in Chemnitz (4 and 5 March 2006) were not only=20 visited by Gentoo developers, but you could also visit them at their boot= h=20 for a little chat. You could see an SGI Octane constantly compile stuff,=20 but at the end of the second day, finally xorg was running. Of course=20 devotional objects such as stickers or a DVD with the 2006.0 release plus= =20 some extra goodies like stage archives and a lot of source packages could= =20 be purchased at the stand. Tobias Scherbaum[12] also gave a speech about=20 Gentoo.=20 12. [email protected] =20 Figure 3.1: Left to right: booth staffers tuxus, dertobi123 and Mr. Big http://www.gentoo.org/images/gwn/200600313_chemnitz.jpg =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 4. Gentoo in the press =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Linux Magazin (4/2006, in German) --------------------------------- =20 The April edition of Germany's Linux Magazin dedicates its cover story an= d=20 half a dozen in-depth articles inside the printed magazine to=20 virtualization in all its forms. One article features Gentoo developer=20 Benedikt B=C3=B6hm[13] and the vserver project for Linux, based on the=20 vserver-sources and utilities provided in Gentoo. The magazine is=20 available at news stands in German-speaking countries.=20 13. [email protected] =20 Opensourcejahrbuch (March 2006) ------------------------------- =20 Last week we published a reference to an interview with Bill Hilf,=20 Microsoft's open-source lab director. Now the full publication is=20 available, the 2006 edition of the Open-Source Jahrbuch[14] can be=20 downloaded for free, or purchased in print for a moderate fee.=20 14. http://www.opensourcejahrbuch.de/2006/english.html =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 5. Tips and tricks =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Iproute2 instead of ifconfig/route ---------------------------------- =20 For many, ifconfig and route are still the preferred commands for=20 configuring a network through the command line. However, in modern networ= k=20 environments, ifconfig has its drawbacks. And as you would expect from a=20 Free Software community, improved packages have been developed. iproute2=20 is one of them and is getting increasingly popular.=20 =20 The default command to work with iproute2 is ip. Clean, simple to remembe= r=20 and extremely powerful. But its power is well described in many documents= ,=20 including the iproute2 document[15] and the Guide to IP Layer Network=20 Administration with Linux[16]. In this short introduction, we'll stay wit= h=20 the simplest basics that most people use just to show you how easy it is=20 to "migrate" from ifconfig (sys-apps/net-tools) to ip (sys-apps/iproute2)= .=20 15. http://www.policyrouting.org/iproute2.doc.html 16. http://linux-ip.net/html/ =20 To configure a host to use IP address 192.168.0.102, netmask 255.255.255.= 0=20 and default gateway 192.168.0.1, the "old" commands were:=20 =20 +------------------------------------------------------------------------= -+ | Code Listing 5.1: = | | Using ifconfig and route = | +------------------------------------------------------------------------= -+ | = | |# ifconfig eth0 192.168.0.102 netmask 255.255.255.0 up = | |# route add default gw 192.168.0.1 = | | = | +------------------------------------------------------------------------= -+ =20 Using iproute2, this becomes:=20 =20 +------------------------------------------------------------------------= -+ | Code Listing 5.2: = | | Using iproute2's ip command = | +------------------------------------------------------------------------= -+ | = | |# ip address 192.168.0.102/24 dev eth0 = | |# ip route add default via 192.168.0.1 = | | = | +------------------------------------------------------------------------= -+ =20 The syntax isn't all that difficult, is it? Let's take a look at our=20 current routing table. With route you would run route -n:=20 =20 +------------------------------------------------------------------------= -+ | Code Listing 5.3: = | | Using route = | +------------------------------------------------------------------------= -+ | = | |# route -n = | |Kernel IP routing table = | |Destination Gateway Genmask Flags Metric Ref Use = | Iface |192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 = | eth0 |127.0.0.0 127.0.0.1 255.0.0.0 UG 0 0 0 = lo| |0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 = | eth0 | = | +------------------------------------------------------------------------= -+ =20 With ip, you ask it to show the routes:=20 =20 +------------------------------------------------------------------------= -+ | Code Listing 5.4: = | | Using ip to show the routing table = | +------------------------------------------------------------------------= -+ | = | |# ip route show = | |192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.121 = | |127.0.0.0/8 via 127.0.0.1 dev lo scope link = | |default via 192.168.0.1 dev eth0 = | | = | +------------------------------------------------------------------------= -+ =20 You might find this output strange; however, it gives a lot of useful=20 information. For instance, scope link means that the network is reachable= =20 while proto kernel informs us that the kernel has added this routing as=20 part of bringing the interface up.=20 =20 Using ip within Gentoo isn't difficult either. The Gentoo=20 sys-apps/baselayout package supports both formats (ifconfig and ip):=20 =20 +------------------------------------------------------------------------= -+ | Code Listing 5.5: = | | Configuring the network through /etc/conf.d/net = | +------------------------------------------------------------------------= -+ | = | |(Old-style configuration) = | |config_eth0=3D( "192.168.0.102 netmask 255.255.255.0" ) = | |routes_eth0=3D( "default gw 192.168.0.1" ) = | | = | |(Using iproute2 -- don't forget to emerge it first) = | |modules=3D( "iproute2" ) = | |config_eth0=3D( "192.168.0.102/24" ) = | |routes_eth0=3D( "default via 192.168.0.1" ) = | | = | +------------------------------------------------------------------------= -+ =20 Note: For more /etc/conf.d/net magic, please read the commented file=20 /etc/conf.d/net.example.=20 =20 That's it for now; have fun with Gentoo !=20 =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 6. Gentoo developer moves =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Moves ----- =20 The following developers recently left the Gentoo project:=20 =20 * None this week=20 =20 Adds ---- =20 The following developers recently joined the Gentoo project:=20 =20 * Emanuele Giaquin (exg) - Gentoo/OS X and PPC =20 * Alfredo Tupone (Tupone) - Games herd =20 =20 Changes ------- =20 The following developers recently changed roles within the Gentoo project= : =20 * None this week=20 =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 7. Gentoo Security =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 IMAP Proxy: Format string vulnerabilities ----------------------------------------- =20 Format string vulnerabilities in IMAP Proxy may lead to the execution of=20 arbitrary code when connected to malicious IMAP servers.=20 =20 For more information, please see the GLSA Announcement[17]=20 17. http://www.gentoo.org/security/en/glsa/glsa-200603-04.xml =20 zoo: Stack-based buffer overflow -------------------------------- =20 A stack-based buffer overflow in zoo may be exploited to execute arbitrar= y=20 code through malicious ZOO archives.=20 =20 For more information, please see the GLSA Announcement[18]=20 18. http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml =20 GNU tar: Buffer overflow ------------------------ =20 A malicious tar archive could trigger a Buffer overflow in GNU tar,=20 potentially resulting in the execution of arbitrary code.=20 =20 For more information, please see the GLSA Announcement[19]=20 19. http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml =20 flex: Potential insecure code generation ---------------------------------------- =20 flex might generate code with a buffer overflow, making applications usin= g=20 such scanners vulnerable to the execution of arbitrary code.=20 =20 For more information, please see the GLSA Announcement[20]=20 20. http://www.gentoo.org/security/en/glsa/glsa-200603-07.xml =20 GnuPG: Incorrect signature verification --------------------------------------- =20 GnuPG may erroneously report a modified or unsigned message has a valid=20 digital signature.=20 =20 For more information, please see the GLSA Announcement[21]=20 21. http://www.gentoo.org/security/en/glsa/glsa-200603-08.xml =20 SquirrelMail: Cross-site scripting and IMAP command injection ------------------------------------------------------------- =20 SquirrelMail is vulnerable to several cross-site scripting vulnerabilitie= s=20 and IMAP command injection.=20 =20 For more information, please see the GLSA Announcement[22]=20 22. http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml =20 Cube: Multiple vulnerabilities ------------------------------ =20 Cube is vulnerable to a buffer overflow, invalid memory access and remote= =20 client crashes, possibly leading to a Denial of Service or remote code=20 execution.=20 =20 For more information, please see the GLSA Announcement[23]=20 23. http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 8. Bugzilla =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Statistics ---------- =20 The Gentoo community uses Bugzilla (bugs.gentoo.org[24]) to record and=20 track bugs, notifications, suggestions and other interactions with the=20 development team. Between 05 March 2006 and 12 March 2006, activity on th= e=20 site has resulted in:=20 24. http://bugs.gentoo.org =20 * 849 new bugs during this period=20 * 413 bugs closed or resolved during this period=20 * 25 previously closed bugs were reopened this period=20 =20 Of the 9683 currently open bugs: 62 are labeled 'blocker', 155 are labele= d=20 'critical', and 539 are labeled 'major'.=20 =20 Closed bug rankings ------------------- =20 The developers and teams who have closed the most bugs during this period= =20 are:=20 =20 * Xavier Neys[25], with 22 closed bugs[26] =20 * Gentoo Security[27], with 20 closed bugs[28] =20 * Gentoo Games[29], with 17 closed bugs[30] =20 * NX Server Herd[31], with 16 closed bugs[32] =20 * GNU Emacs Herd[33], with 16 closed bugs[34] =20 * media-video herd[35], with 11 closed bugs[36] =20 * Portage team[37], with 10 closed bugs[38] =20 * Gentoo's Team for Core System packages[39], with 10 closed bugs[40] =20 25. [email protected] 26.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-03-05&chfieldto=3D2006-03-12&= resolution=3DFIXED&[email protected] 27. [email protected] 28.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-03-05&chfieldto=3D2006-03-12&= resolution=3DFIXED&[email protected] 29. [email protected] 30.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-03-05&chfieldto=3D2006-03-12&= resolution=3DFIXED&[email protected] 31. [email protected] 32.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-03-05&chfieldto=3D2006-03-12&= resolution=3DFIXED&[email protected] 33. [email protected] 34.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-03-05&chfieldto=3D2006-03-12&= resolution=3DFIXED&[email protected] 35. [email protected] 36.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-03-05&chfieldto=3D2006-03-12&= resolution=3DFIXED&[email protected] 37. [email protected] 38.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-03-05&chfieldto=3D2006-03-12&= resolution=3DFIXED&[email protected] 39. [email protected] 40.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-03-05&chfieldto=3D2006-03-12&= resolution=3DFIXED&[email protected] =20 New bug rankings ---------------- =20 The developers and teams who have been assigned the most new bugs during=20 this period are:=20 =20 * Default Assignee for New Packages[41], with 34 new bugs[42] =20 * Gentoo KDE team[43], with 12 new bugs[44] =20 * Gentoo Games[45], with 12 new bugs[46] =20 * Mozilla Gentoo Team[47], with 9 new bugs[48] =20 * Gentoo Science Related Packages[49], with 8 new bugs[50] =20 * AMD64 Project[51], with 8 new bugs[52] =20 * Gentoo Toolchain Maintainers[53], with 7 new bugs[54] =20 * Python Gentoo Team[55], with 7 new bugs[56] =20 41. [email protected] 42.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-03-05&chf= ieldto=3D2006-03-12&[email protected] 43. [email protected] 44.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-03-05&chf= ieldto=3D2006-03-12&[email protected] 45. [email protected] 46.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-03-05&chf= ieldto=3D2006-03-12&[email protected] 47. [email protected] 48.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-03-05&chf= ieldto=3D2006-03-12&[email protected] 49. [email protected] 50.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-03-05&chf= ieldto=3D2006-03-12&[email protected] 51. [email protected] 52.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-03-05&chf= ieldto=3D2006-03-12&[email protected] 53. [email protected] 54.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-03-05&chf= ieldto=3D2006-03-12&[email protected] 55. [email protected] 56.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-03-05&chf= ieldto=3D2006-03-12&[email protected] =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 9. GWN feedback =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Please send us your feedback[57] and help make the GWN better.=20 57. [email protected] =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D 10. GWN subscription information =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D =20 To subscribe to the Gentoo Weekly Newsletter, send a blank email to=20 [email protected].=20 =20 To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to=20 [email protected] from the email address you are=20 subscribed under. =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 11. Other languages =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 The Gentoo Weekly Newsletter is also available in the following languages= : =20 * Danish[58] =20 * Dutch[59] =20 * English[60] =20 * German[61] =20 * French[62] =20 * Korean[63] =20 * Japanese[64] =20 * Italian[65] =20 * Polish[66] =20 * Portuguese (Brazil)[67] =20 * Portuguese (Portugal)[68] =20 * Russian[69] =20 * Spanish[70] =20 * Turkish[71] =20 58. http://www.gentoo.org/news/da/gwn/gwn.xml 59. http://www.gentoo.org/news/nl/gwn/gwn.xml 60. http://www.gentoo.org/news/en/gwn/gwn.xml 61. http://www.gentoo.org/news/de/gwn/gwn.xml 62. http://www.gentoo.org/news/fr/gwn/gwn.xml 63. http://www.gentoo.org/news/ko/gwn/gwn.xml 64. http://www.gentoo.org/news/ja/gwn/gwn.xml 65. http://www.gentoo.org/news/it/gwn/gwn.xml 66. http://www.gentoo.org/news/pl/gwn/gwn.xml 67. http://www.gentoo.org/news/pt_br/gwn/gwn.xml 68. http://www.gentoo.org/news/pt/gwn/gwn.xml 69. http://www.gentoo.org/news/ru/gwn/gwn.xml 70. http://www.gentoo.org/news/es/gwn/gwn.xml 71. http://www.gentoo.org/news/tr/gwn/gwn.xml =20 Ulrich Plate <[email protected]> - Editor Ioannis Aslanidis <[email protected]> - Author Wernfried Haas <[email protected]> - Author Shyam Mani <[email protected]> - Author Sven Vermeulen <[email protected]> - Author --=20 [email protected] mailing list