Gentoo Weekly Newsletter 17 April 2006
Ulrich Plate <[email protected]> Mon, 17 Apr 2006 15:47:22 +0200
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
-------------------------------------------------------------------------= -- Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/current.xml This is the Gentoo Weekly Newsletter for the week of 17 April 2006. -------------------------------------------------------------------------= -- =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 1. Gentoo news =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Gentoo on the Linux World Expo in Boston ---------------------------------------- =20 The Linux World Conference and Expo is one of the biggest Linux events in= =20 the United States. The venue for its East Coast edition was the Boston=20 Convention and Exposition Center in Boston, Mass., from 4 to 6 April.=20 Gentoo had a strong presence at the show with 14 developers in attendance= =20 over three days. The booth staff showed several fun and experimental=20 packages at the show, including Enlightenment E17 on Mike Frysinger[1]'s=20 quad-core PowerMac G5 and Xgl on Josh Nichols[2]' Athlon64 X2. Mike also=20 brought an ARM-based machine and a LanTank[3], a SuperH-based NAS device=20 with Gentoo Linux on it. Gentoo was located in the .Org Pavilion between=20 the Slashdot Lounge and the Linux Test Project.=20 1. [email protected] 2. [email protected] 3. http://dev.gentoo.org/~vapier/superh/lantank/HOWTO.html =20 Figure 1.1: Eight of the 14 Gentoo devs at Boston LWE http://www.gentoo.org/images/gwn/20060417_lwe1.jpg =20 Note: From left to right: Rajiv Manglani, Joseph Jezak, Daniel Ostrow,=20 Michael Sterrett, Chris Gianelloni, Mark Loeser, Josh Nichols, and Mike=20 Frysinger (front)=20 =20 During the show, Mark Stephenson, Director of Sales at i*hydra[4]=20 approached the Gentoo developers about doing a Gentoo Linux installation=20 on one of their demo machines, an 8-CPU dual-core AMD Opteron 875 system=20 with 64GB of RAM and over 1.2TB of disk space. With the assistance of Rya= n=20 Rice, Operations Manager, and the blessing of David Stapp, President,=20 Gentoo Linux was soon booting in 16-core goodness. The installation, with= =20 a complete Gnome environment, took approximately 20 minutes, using the=20 experimental 2006.0 AMD64 Installer LiveCD. The machine is an i*hydra=20 Galaxy, based on the Tyan Transport VX50 platform. And of course, they=20 slapped a "Powered i by Gentoo Linux" sticker on the machine to let=20 everyone know what was under the hood.=20 4. http://www.ihydra.com =20 Figure 1.2: Chris Gianelloni with Ryan Rice and Marc Stephenson of i*hydr= a http://www.gentoo.org/images/gwn/20060417_lwe2.jpg =20 Gentoo Forums internationalization and phpBB 2.0.20 --------------------------------------------------- =20 A lot of effort by Forums staff and users has been put into translating=20 all the text that was generated in English by the custom mods of the=20 Forums into many languages (Chinese (simplified and traditional), Danish,= =20 Dutch, Esperanto, Finnish, French, German, Greek, Italian, Norwegian,=20 Polish, Portuguese, Russian, Spanish, and Swedish). The translations=20 committed so far have already been implemented in the Forums along with=20 the new 2.0.20 phpBB patch set, others are still in testing. Some=20 languages still need help with translation, so please have a look at the=20 Gentoo Forums Translator Guidelines[5] and subscribe to the Forums=20 translations mailing list if you're able and willing to contribute.=20 5. http://www.gentoo.org/proj/en/forums/translations.xml =20 Python 2.4.3 now in Portage --------------------------- =20 Python 2.4.3 is now in Portage but masked for testing. 2.4.3 is a bugfix=20 release and fixes quite a few UTF-8 issues as well as a few memory leaks=20 and segfaults. A detailed changelog[6] is available. As always, remember=20 to run /usr/sbin/python-updater after updating Python. Python 2.4.3 will=20 be unmasked on 28 April if no major bugs are found.=20 6. http://www.python.org/download/releases/2.4.3/NEWS.txt =20 Old-style PHP packages vanishing -------------------------------- =20 The PHP Herd announces that the old-style PHP packages, which were=20 unsupported and deprecated for months, are finally going away. After=20 months of work, the team considers the new dev-lang/php package and the=20 related dev-php[4,5]/ categories fully ready for production use, and=20 encourage all users to upgrade. Helpful informations can be found at the=20 PHP project's pages[7], along with a HOWTO[8] regarding the migration to=20 dev-lang/php. The old-style PHP packages (dev-php/php, dev-php/php-cgi,=20 dev-php/mod_php, dev-php/PECL-*, and older dev-php/PEAR-* packages) will=20 be package.masked on Wednesday, 19 April 2006, and removed from the=20 Portage tree about a month later.=20 7. http://www.gentoo.org/proj/en/php 8. http://www.gentoo.org/proj/en/php/php-upgrading.xml =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 2. Heard in the community =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Web forums ---------- =20 Every Show Sucks in Gentoo! =20 ciaran27[9] explains in our Forums how easy it is to use Mplayer and the=20 XMMPlayer plugin to watch ESS in Gentoo. Wanna enjoy the show as well?=20 9. http://forums.gentoo.org/profile.php?mode=3Dviewprofile&u=3D117873 =20 * ESS.tv Linux HOWTO[10]=20 10. http://forums.gentoo.org/viewtopic-t-451094.html =20 Should we remove FEATURES=3D"candy" =20 Gentoo Developer antarus[11] has started a thread asking Forum users if=20 they would like to keep the Portage feature that changes the output=20 spinner from a -\|/- to a random string of characters that form a=20 sentence. Vote on the poll and state your opinion!=20 11. http://forums.gentoo.org/profile.php?mode=3Dviewprofile&u=3D108696 =20 * FEATURES=3D"candy"[12]=20 12. http://forums.gentoo.org/viewtopic.php?t=3D451492 =20 Is gcc 4.1.0 safe yet? =20 Forum user Kidel Fastro[13] has started a new thread asking if gcc 4.1.0=20 is safe to use at this point and if the upgrade would be worth it. If you= =20 have a look at the answers of other forum users in the thread, you will=20 notice that it looks promising!=20 13. http://forums.gentoo.org/profile.php?mode=3Dviewprofile&u=3D134507 =20 * GCC 4.1.0 - is it safe/worth ?[14]=20 14. http://forums.gentoo.org/viewtopic.php?t=3D450504 =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 3. Gentoo international =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Japan: Kosmikus in Tokyo ------------------------ =20 Last Wednesday, five local Gentooists organized a welcome party for Gento= o=20 developer Andres Loeh[15] in Tokyo's Shibuya district. Japanese and other= =20 Asian beer was sampled with some mixed reactions by those from the top=20 beer drinking countries in the world, various topics were discussed, and=20 everybody was pleasantly surprised to see a usually quiet scientist=20 talking passionately about his love for Haskell. The lively discussions=20 were interrupted by restaurant staff bringing a huge ice-cream accompanie= d=20 by songs and crackers -- a birthday special treat for one=20 not-yet-a-Gentoo-dev. Since GentooJP can always use an excuse for=20 gatherings like these, please let them know if you have a plan to visit=20 Japan.=20 15. [email protected] =20 Figure 3.1: Kosmikus (left) and Kalin Kozhukarov munching the latter's=20 birthday ice-cream http://www.gentoo.org/images/gwn/20060417_kosmikus.jpg =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 4. Gentoo in the press =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Daemonnews (12 April 2006) -------------------------- =20 David Stanford of Daemon News, the Ezine for BSD users, conducted an=20 interview[16] with Gentoo/ALT lead developer Diego Petten=C3=B2[17] last = week,=20 giving ample space to the "relatively unheard-of" Gentoo/BSD for a=20 complete outline of the project and its protagonists.=20 16. http://ezine.daemonnews.org/200604/gentoo-bsd_interview.html 17. [email protected] =20 OnMac.net (16 April 2006) ------------------------- =20 OnMac is having all sorts of fun[18] with exploring the possibilities of = a=20 triple-boot setup for Mac OS X, Windows XP and Linux on a Mac Mini --=20 using a 2006.0 Gentoo LiveCD installation to complement the best of the=20 other worlds, and jumping through all the hoops of a Gentoo installation.= =20 18. http://wiki.onmac.net/index.php/Triple_Boot_via_BootCamp =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 5. Gentoo developer moves =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Moves ----- =20 The following developers recently left the Gentoo project:=20 =20 * Corey Shields=20 * Ciaran McCreesh=20 * Sergey Kuleshov=20 =20 Adds ---- =20 The following developers recently joined the Gentoo project:=20 =20 * Benigno B. J=C3=BAnior (bbj) - Gentoo/*BSD=20 * Denis Dupeyron (calchan) - sci-electronics=20 * Keri Harris (keri) - Prolog=20 =20 Changes ------- =20 The following developers recently changed roles within the Gentoo project= : =20 * Curtis Napier (curtis119) - New Infra team member=20 * Xavier Neys (neysx) - New Infra team member=20 * Mike Doty (kingtaco) - New Infra team member=20 * Christian Hartmann (ian) - adds ebuild development to his duties as a=20 Forum admin=20 * Ioannis Aslanidis (deathwing00) - joined the KDE herd=20 =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 6. Gentoo Security =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 MediaWiki: Cross-site scripting vulnerability --------------------------------------------- =20 MediaWiki is vulnerable to a cross-site scripting attack that could allow= =20 arbitrary JavaScript code execution.=20 =20 For more information, please see the GLSA Announcement[19]=20 19. http://www.gentoo.org/security/en/glsa/glsa-200604-01.xml =20 Horde Application Framework: Remote code execution -------------------------------------------------- =20 The help viewer of the Horde Framework allows attackers to execute=20 arbitrary remote code.=20 =20 For more information, please see the GLSA Announcement[20]=20 20. http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml =20 FreeRADIUS: Authentication bypass in EAP-MSCHAPv2 module -------------------------------------------------------- =20 The EAP-MSCHAPv2 module of FreeRADIUS is affected by a validation issue=20 which causes some authentication checks to be bypassed.=20 =20 For more information, please see the GLSA Announcement[21]=20 21. http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml =20 Kaffeine: Buffer overflow ------------------------- =20 Kaffeine is vulnerable to a buffer overflow that could lead to the=20 execution of arbitrary code.=20 =20 For more information, please see the GLSA Announcement[22]=20 22. http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml =20 Doomsday: Format string vulnerability ------------------------------------- =20 Format string vulnerabilities in Doomsday may lead to the execution of=20 arbitrary code.=20 =20 For more information, please see the GLSA Announcement[23]=20 23. http://www.gentoo.org/security/en/glsa/glsa-200604-05.xml =20 ClamAV: Multiple vulnerabilities -------------------------------- =20 ClamAV contains multiple vulnerabilities that could lead to remote=20 execution of arbitrary code or cause an application crash.=20 =20 For more information, please see the GLSA Announcement[24]=20 24. http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml =20 Cacti: Multiple vulnerabilities in included ADOdb ------------------------------------------------- =20 Multiple vulnerabilities have been discovered in the ADOdb layer included= =20 in Cacti, potentially resulting in the execution of arbitrary code.=20 =20 For more information, please see the GLSA Announcement[25]=20 25. http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 7. Bugzilla =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Statistics ---------- =20 The Gentoo community uses Bugzilla (bugs.gentoo.org[26]) to record and=20 track bugs, notifications, suggestions and other interactions with the=20 development team. Between 02 April 2006 and 16 April 2006, activity on th= e=20 site has resulted in:=20 26. http://bugs.gentoo.org =20 * 1646 new bugs during this period=20 * 859 bugs closed or resolved during this period=20 * 56 previously closed bugs were reopened this period=20 =20 Of the 9886 currently open bugs: 65 are labeled 'blocker', 156 are labele= d=20 'critical', and 538 are labeled 'major'.=20 =20 Closed bug rankings ------------------- =20 The developers and teams who have closed the most bugs during this period= =20 are:=20 =20 * Gentoo KDE team[27], with 32 closed bugs[28] =20 * Gentoo Games[29], with 32 closed bugs[30] =20 * Gentoo Security[31], with 29 closed bugs[32] =20 * Perl Devs @ Gentoo[33], with 29 closed bugs[34] =20 * Gentoo Science Related Packages[35], with 28 closed bugs[36] =20 * AMD64 Project[37], with 22 closed bugs[38] =20 * Gentoo X-windows packagers[39], with 19 closed bugs[40] =20 * Portage team[41], with 18 closed bugs[42] =20 27. [email protected] 28.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-04-02&chfieldto=3D2006-04-16&= resolution=3DFIXED&[email protected] 29. [email protected] 30.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-04-02&chfieldto=3D2006-04-16&= resolution=3DFIXED&[email protected] 31. [email protected] 32.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-04-02&chfieldto=3D2006-04-16&= resolution=3DFIXED&[email protected] 33. [email protected] 34.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-04-02&chfieldto=3D2006-04-16&= resolution=3DFIXED&[email protected] 35. [email protected] 36.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-04-02&chfieldto=3D2006-04-16&= resolution=3DFIXED&[email protected] 37. [email protected] 38.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-04-02&chfieldto=3D2006-04-16&= resolution=3DFIXED&[email protected] 39. [email protected] 40.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-04-02&chfieldto=3D2006-04-16&= resolution=3DFIXED&[email protected] 41. [email protected] 42.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=3DCLO= SED&chfield=3Dbug_status&chfieldfrom=3D2006-04-02&chfieldto=3D2006-04-16&= resolution=3DFIXED&[email protected] =20 New bug rankings ---------------- =20 The developers and teams who have been assigned the most new bugs during=20 this period are:=20 =20 * Default Assignee for New Packages[43], with 58 new bugs[44] =20 * Portage team[45], with 21 new bugs[46] =20 * Default Assignee for Orphaned Packages[47], with 19 new bugs[48] =20 * AMD64 Project[49], with 19 new bugs[50] =20 * Gentoo KDE team[51], with 17 new bugs[52] =20 * media-video herd[53], with 16 new bugs[54] =20 * Gentoo X-windows packagers[55], with 14 new bugs[56] =20 * Gentoo Sound Team[57], with 14 new bugs[58] =20 43. [email protected] 44.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-04-02&chf= ieldto=3D2006-04-16&[email protected] 45. [email protected] 46.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-04-02&chf= ieldto=3D2006-04-16&[email protected] 47. [email protected] 48.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-04-02&chf= ieldto=3D2006-04-16&[email protected] 49. [email protected] 50.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-04-02&chf= ieldto=3D2006-04-16&[email protected] 51. [email protected] 52.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-04-02&chf= ieldto=3D2006-04-16&[email protected] 53. [email protected] 54.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-04-02&chf= ieldto=3D2006-04-16&[email protected] 55. [email protected] 56.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-04-02&chf= ieldto=3D2006-04-16&[email protected] 57. [email protected] 58.=20 http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DASSIGNED= &bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-04-02&chf= ieldto=3D2006-04-16&[email protected] =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 8. GWN feedback =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Please send us your feedback[59] and help make the GWN better.=20 59. [email protected] =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D 9. GWN subscription information =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D =20 To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to=20 [email protected].=20 =20 To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to=20 [email protected] from the e-mail address you are=20 subscribed under. =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 10. Other languages =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 The Gentoo Weekly Newsletter is also available in the following languages= : =20 * Danish[60] =20 * Dutch[61] =20 * English[62] =20 * German[63] =20 * French[64] =20 * Korean[65] =20 * Japanese[66] =20 * Italian[67] =20 * Polish[68] =20 * Portuguese (Brazil)[69] =20 * Portuguese (Portugal)[70] =20 * Russian[71] =20 * Spanish[72] =20 * Turkish[73] =20 60. http://www.gentoo.org/news/da/gwn/gwn.xml 61. http://www.gentoo.org/news/nl/gwn/gwn.xml 62. http://www.gentoo.org/news/en/gwn/gwn.xml 63. http://www.gentoo.org/news/de/gwn/gwn.xml 64. http://www.gentoo.org/news/fr/gwn/gwn.xml 65. http://www.gentoo.org/news/ko/gwn/gwn.xml 66. http://www.gentoo.org/news/ja/gwn/gwn.xml 67. http://www.gentoo.org/news/it/gwn/gwn.xml 68. http://www.gentoo.org/news/pl/gwn/gwn.xml 69. http://www.gentoo.org/news/pt_br/gwn/gwn.xml 70. http://www.gentoo.org/news/pt/gwn/gwn.xml 71. http://www.gentoo.org/news/ru/gwn/gwn.xml 72. http://www.gentoo.org/news/es/gwn/gwn.xml 73. http://www.gentoo.org/news/tr/gwn/gwn.xml =20 Ulrich Plate <[email protected]> - Editor Ioannis Aslanidis <[email protected]> - Author Chris Gianelloni <[email protected]> - Author Kalin Kozhukarov <[email protected]> - Author Luca Longinotti <[email protected]> - Author Bryan =C3=98stergaard <[email protected]> - Author --=20 [email protected] mailing list