Gentoo Weekly Newsletter 13 November 2006
Chris Gianelloni <[email protected]> Tue, 14 Nov 2006 22:06:10 -0500
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/20061113-newsletter.xml This is the Gentoo Weekly Newsletter for the week of 13 November 2006. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 1. Gentoo News =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Anonymous CVS and SVN now available ----------------------------------- The Gentoo Infrastructure team[1] is pleased to announce that they have completed the configuration and testing of the anonymous read-only CVS an= d SVN services for Gentoo repositories, and that these services are now available for public use. 1. http://www.gentoo.org/proj/en/infrastructure The anonymous services are primarily intended to help our non-developer contributors easily produce patches and modifications (cvs diff/svn diff)= , and provide easier access to the source for gentoo-hosted projects. For our more enthusiastic of users out there, please note that the CVS an= d SVN services are not any more up-to-date than what is available via rsync= , and may be an additional 30 minutes behind, based on load on various machines. Please do not switch to using the CVS simply because you think that it will get you the tree faster, or make you cooler. Compared to our rsync distribution method, the anonymous services have considerably less resources (both processing and bandwidth) behind them. Infrastructure wil= l not hesitate to block IP addresses that abuse this service. CVS CVS is limited to 5 concurrent users. It currently offers the following repositories: gentoo, gentoo-projects, gentoo-src, and gentoo-x86 +------------------------------------------------------------------------= ---+ | Code Listing 1.1 = | | Checking out from CVS = | +------------------------------------------------------------------------= ---+ | $ cvs -d :pserver:[email protected]/var/cvsroot co <repo> = | +------------------------------------------------------------------------= ---+ SVN SVN has the following repositories: apache, baselayout, catalyst, devmanu= al, eselect, genkernel, gentoo-alt, gentoo-python, gentoo-syntax, gentoo-vdr, gentoolkit, gli, glsr, hardened, hwdata, keychain, linux-patches, livecd-tools, portage, sandbox +------------------------------------------------------------------------= ---+ | Code Listing 1.2 = | | Checking out from SVN = | +------------------------------------------------------------------------= ---+ | $ svn co http://anonsvn.gentoo.org/repositories/<repo> = | +------------------------------------------------------------------------= ---+ The front page of the service, http://anoncvs.gentoo.org/, maintains an accurate list of the repositories available, as well as holding complete instructions and caveats. Please file an Infrastructure bug[2] for any problems that might come up. 2. http://bugs.gentoo.org/enter_bug.cgi?product=3DGentoo%20Infrastruct= ure The gzip blocking previously discussed has been removed, due to bandwidth constraints on the part of the server. The concurrent user limit has been lowered correspondingly. Thanks go to: kengland, robbat2, kingtaco, ramereth, and several others f= or helping make this happen. Engine Yard uses Gentoo clusters for Ruby on Rails service ---------------------------------------------------------- Engine Yard uses Gentoo-based clusters for its Ruby on Rails deployment service. There's a video about its use of Gentoo at http://qualityhumans.com/images/tom_ezra_gentoo.mov. In it, they talk abo= ut how Gentoo has helped them in the design of their service and praise Gentoo's customization capabilities. They also make several humorous comments about Gentoo, such as "I'm pretty convinced that all the other distros are built on Gentoo." They then go on to describe their upcoming = Xen domU image, which will be a Ruby on Rails development environment based o= n Gentoo. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 2. Heard in the community =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D gentoo-user ----------- Symlinking out of a chroot Brian Davis was planning on running his Apache server in a chroot. Howeve= r, he did not want to have to copy the pictures and other content to be serv= ed into the chroot. He wanted to know if he could symlink out of the chroot = to the content. Responding Gentooers pointed out that the symlinks wouldn't work and suggested using mount --bind instead. +------------------------------------------------------------------------= ---+ | Code Listing 2.1 = | | Using --bind with mount = | +------------------------------------------------------------------------= ---+ | # mount --bind /source /chroot/target = | +------------------------------------------------------------------------= ---+ * http://archives.gentoo.org/gentoo-user/msg_103623.xml New to Gentoo. Having trouble getting it started for the first time Jon M had set up his root partition on /dev/hda3 using ReiserFS. When he tried to boot, however, he received error messages including "VFS: Cannot open root device "hda3" or unknown-block(0,0)". Richard Fish responded that the "unknown-block(0,0)" showed that the kern= el could not find a device for hda3. This would be a symptom of failure to compile in the necessary IDE device driver's for Jon's chipset or a failu= re to compile int IDE support entirely. Jon M had a look at the .config file for his kernel and indicated he'd missed the device driver for his chipset. * http://archives.gentoo.org/gentoo-user/msg_103578.xml =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 3. Gentoo developer moves =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Moves ----- The following developers recently left the Gentoo project: * none this week Adds ---- The following developers recently joined the Gentoo project: * Alexander F=C3=A6r=C3=B8y (eroyf) User Relations/Alpha/MIPS * C=C3=A9dric Krier (cedk) netmon team Changes ------- The following developers recently changed roles within the Gentoo project= : * none this week =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 4. Gentoo security =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D NVIDIA binary graphics driver: Privilege escalation vulnerability ----------------------------------------------------------------- The NVIDIA binary graphics driver is vulnerable to a local privilege escalation through an X session. For more information, please see the GLSA Announcement[3] 3. http://www.gentoo.org/security/en/glsa/glsa-200611-03.xml Bugzilla: Multiple Vulnerabilities ---------------------------------- Bugzilla is vulnerable to cross-site scripting, script injection, and request forgery. For more information, please see the GLSA Announcement[4] 4. http://www.gentoo.org/security/en/glsa/glsa-200611-04.xml Netkit FTP Server: Privilege escalation --------------------------------------- An incorrect seteuid() call could allow an FTP user to access some files = or directories that would normally be inaccessible. For more information, please see the GLSA Announcement[5] 5. http://www.gentoo.org/security/en/glsa/glsa-200611-05.xml =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D 5. Upcoming package removals =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D This is a list of packages that have been announced to be removed in the future. The package removals come from many locations, including the Treecleaners[6] and various developers. 6. http://www.gentoo.org/proj/en/qa/treecleaners Last-Rites: ----------- Package: Removal date: Contact: games-fps/ut2004-domain2049 10 Dec 06 Chris Gianelloni[7] dev-db/dbbalancer 10 Dec 06 Tiziano Mueller[8] 7. [email protected] 8. [email protected] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 6. Bugzilla =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Summary ------- * Statistics * Closed bug ranking * New bug rankings Statistics ---------- The Gentoo community uses Bugzilla (bugs.gentoo.org[9]) to record and tra= ck bugs, notifications, suggestions and other interactions with the developm= ent team. Between 05 November 2006 and 12 November 2006, activity on the site has resulted in: 9. http://bugs.gentoo.org * 753 new bugs during this period * 484 bugs closed or resolved during this period * 15 previously closed bugs were reopened this period * 183 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period * 181 bugs marked as duplicates during this period Of the 10914 currently open bugs: 29 are labeled 'blocker', 103 are label= ed 'critical', and 487 are labeled 'major'. Closed bug rankings ------------------- The developers and teams who have closed the most bugs during this period are: * Gentoo's Team for Core System packages[10], with 34 closed bugs[11] * Gentoo Linux Gnome Desktop Team[12], with 30 closed bugs[13] * PgSQL Bugs[14], with 22 closed bugs[15] * AMD64 Project[16], with 21 closed bugs[17] * X11 External Driver Maintainers[18], with 17 closed bugs[19] * Gentoo Games[20], with 15 closed bugs[21] * Gentoo Security[22], with 12 closed bugs[23] * Gentoo Sound Team[24], with 10 closed bugs[25] 10. [email protected] 11. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-11-05&chfieldto=3D2006-= 11-12&resolution=3DFIXED&[email protected] 12. [email protected] 13. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-11-05&chfieldto=3D2006-= 11-12&resolution=3DFIXED&[email protected] 14. [email protected] 15. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-11-05&chfieldto=3D2006-= 11-12&resolution=3DFIXED&[email protected] 16. [email protected] 17. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-11-05&chfieldto=3D2006-= 11-12&resolution=3DFIXED&[email protected] 18. [email protected] 19. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-11-05&chfieldto=3D2006-= 11-12&resolution=3DFIXED&[email protected] 20. [email protected] 21. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-11-05&chfieldto=3D2006-= 11-12&resolution=3DFIXED&[email protected] 22. [email protected] 23. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-11-05&chfieldto=3D2006-= 11-12&resolution=3DFIXED&[email protected] 24. [email protected] 25. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-11-05&chfieldto=3D2006-= 11-12&resolution=3DFIXED&[email protected] New bug rankings ---------------- The developers and teams who have been assigned the most new bugs during this period are: * Default Assignee for New Packages[26], with 26 new bugs[27] * AMD64 Project[16], with 9 new bugs[28] * X11 External Driver Maintainers[18], with 8 new bugs[29] * Sandro[30], with 8 new bugs[31] * Gentoo Sound Team[24], with 7 new bugs[32] * Java team[33], with 7 new bugs[34] * Gentoo X-windows packagers[35], with 6 new bugs[36] * Steve Arnold[37], with 6 new bugs[38] 16. [email protected] 18. [email protected] 24. [email protected] 26. [email protected] 27. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-11-= 05&chfieldto=3D2006-11-12&[email protected] 28. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-11-= 05&chfieldto=3D2006-11-12&[email protected] 29. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-11-= 05&chfieldto=3D2006-11-12&[email protected] 30. [email protected] 31. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-11-= 05&chfieldto=3D2006-11-12&[email protected] 32. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-11-= 05&chfieldto=3D2006-11-12&[email protected] 33. [email protected] 34. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-11-= 05&chfieldto=3D2006-11-12&[email protected] 35. [email protected] 36. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-11-= 05&chfieldto=3D2006-11-12&[email protected] 37. [email protected] 38. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-11-= 05&chfieldto=3D2006-11-12&[email protected] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 7. GWN feedback =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D The GWN is staffed by volunteers and members of the community who submit ideas and articles. If you are interested in writing for the GWN, have feedback on an article that we have posted, or just have an idea or artic= le that you would like to submit to the GWN, please send us your feedback[39= ] and help make the GWN better. 39. [email protected] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D 8. GWN subscription information =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to [email protected]. To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to [email protected] from the e-mail address you are subscri= bed under. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 9. Other languages =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D The Gentoo Weekly Newsletter is also available in the following languages= : * Chinese (Simplified)[40] * Danish[41] * Dutch[42] * English[43] * German[44] * Greek[45] * French[46] * Korean[47] * Japanese[48] * Italian[49] * Polish[50] * Portuguese (Brazil)[51] * Portuguese (Portugal)[52] * Russian[53] * Slovak[54] * Spanish[55] * Turkish[56] 40. http://www.gentoo.org/news/zh_cn/gwn/gwn.xml 41. http://www.gentoo.org/news/da/gwn/gwn.xml 42. http://www.gentoo.org/news/nl/gwn/gwn.xml 43. http://www.gentoo.org/news/en/gwn/gwn.xml 44. http://www.gentoo.org/news/de/gwn/gwn.xml 45. http://www.gentoo.org/news/el/gwn/gwn.xml 46. http://www.gentoo.org/news/fr/gwn/gwn.xml 47. http://www.gentoo.org/news/ko/gwn/gwn.xml 48. http://www.gentoo.org/news/ja/gwn/gwn.xml 49. http://www.gentoo.org/news/it/gwn/gwn.xml 50. http://www.gentoo.org/news/pl/gwn/gwn.xml 51. http://www.gentoo.org/news/pt_br/gwn/gwn.xml 52. http://www.gentoo.org/news/pt/gwn/gwn.xml 53. http://www.gentoo.org/news/ru/gwn/gwn.xml 54. http://www.gentoo.org/news/sk/gwn/gwn.xml 55. http://www.gentoo.org/news/es/gwn/gwn.xml 56. http://www.gentoo.org/news/tr/gwn/gwn.xml Ulrich Plate <[email protected]> - Editor Chris Atkinson <[email protected]> - Author Donnie Berkholz <[email protected]> - Author Robin H. Miller <[email protected]> - Author Chris Gianelloni <[email protected]> - Author --=20 [email protected] mailing list