Gentoo Weekly Newsletter 18 December 2006

Chris Gianelloni <[email protected]> Thu, 28 Dec 2006 10:21:34 -0500
Newsgroups	gmane.linux.gentoo.weekly-news
Message-ID	<[email protected]>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/20061218-newsletter.txt
This is the Gentoo Weekly Newsletter for the week of 18 December 2006.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
1. Gentoo News
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

EFIKA overlay opens
-------------------

In a follow-up to last week's announcement that the EFIKA[1] evaluation
boards from Genesi[2] had made their way into developer hands, the
Gentoo/PPC[3] team, in cooperation with Release Engineering[4], has made
available an overlay[5] for the EFIKA boards. Currently, the overlay has
only sys-kernel/efika-sources, which is based on gentoo-sources, plus the
EFIKA-specific patches to 2.6.19 that are required. Any future
EFIKA-specific packages will start life out in the overlay before eventua=
lly
making their way into the main tree. The overlay is currently supported b=
y
the Release Engineering team.

   1. http://www.efika.de/index_en.html
   2. http://www.genesippc.com
   3. http://www.gentoo.org/proj/en/base/ppc
   4. http://www.gentoo.org/proj/en/releng
   5. http://overlays.gentoo.org/proj/efika

There is also a #gentoo-efika channel on Freenode for discussions about t=
he
EFIKA hardware and software, as well as general discussion of the platfor=
m.

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
2. Heard in the community
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

gentoo-installer
----------------

Quickstart 0.3 Released

Andrew Gaffney wrote to inform people that version 0.3 of Quickstart has
been released. Quickstart is a provisioning tool, designed to use a simpl=
e
configuration file to provision new Gentoo machines from bare metal. Ther=
e
have been numerous changes and bug fixes since 0.2, some of which are bel=
ow.

  * partitioning and bootloader code redesigned to allow for
    arch-specific code for each
  * x86/amd64 partitioning support rewritten using fdisk instead of
    sfdisk, since sfdisk isn't in busybox
  * sun disklabel and partitioning support implemented
  * sun bootloader (silo) support added (not yet tested)
  * hppa partitioning (uses x86 code) and bootloader (palo) support
    added and tested

With this release, x86/amd64/hppa are officially supported. Support for
sparc is experimental and expected to be fully supported with the next
release. You can find Quickstart at http://agaffney.org/quickstart/releas=
es.

  * http://archives.gentoo.org/gentoo-installer/msg_01323.xml

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
3. Gentoo developer moves
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Moves
-----

The following developers recently left the Gentoo project:

  * none this week

Adds
----

The following developers recently joined the Gentoo project:

  * Christian Marie (pingu) mozilla team

Changes
-------

The following developers recently changed roles within the Gentoo project=
:

  * none this week

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
4. Gentoo security
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Tar: Directory traversal vulnerability
--------------------------------------

Tar is vulnerable to directory traversal possibly allowing for the
overwriting of arbitrary files.

For more information, please see the GLSA Announcement[6]

   6. http://www.gentoo.org/security/en/glsa/glsa-200612-10.xml

AMD64 x86 emulation base libraries: OpenSSL multiple vulnerabilities
--------------------------------------------------------------------

OpenSSL contains multiple vulnerabilities including the possible executio=
n
of remote arbitrary code.

For more information, please see the GLSA Announcement[7]

   7. http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml

F-PROT Antivirus: Multiple vulnerabilities
------------------------------------------

F-Prot Antivirus contains a buffer overflow and other unspecified
vulnerabilities, possibly allowing the remote execution of arbitrary code.

For more information, please see the GLSA Announcement[8]

   8. http://www.gentoo.org/security/en/glsa/glsa-200612-12.xml

libgsf: Buffer overflow
-----------------------

libgsf improperly allocates memory allowing for a heap overflow and possi=
bly
the execution of arbitrary code.

For more information, please see the GLSA Announcement[9]

   9. http://www.gentoo.org/security/en/glsa/glsa-200612-13.xml

Trac: Cross-site request forgery
--------------------------------

Trac allows remote attackers to execute unauthorized actions as other use=
rs.

For more information, please see the GLSA Announcement[10]

  10. http://www.gentoo.org/security/en/glsa/glsa-200612-14.xml

McAfee VirusScan: Insecure DT_RPATH
-----------------------------------

McAfee VirusScan for Linux is distributed with an insecure DT_RPATH,
potentially allowing a remote attacker to execute arbitrary code.

For more information, please see the GLSA Announcement[11]

  11. http://www.gentoo.org/security/en/glsa/glsa-200612-15.xml

Links: Arbitrary Samba command execution
----------------------------------------

Links does not properly validate "smb://" URLs, making it vulnerable to t=
he
execution of arbitrary Samba commands.

For more information, please see the GLSA Announcement[12]

  12. http://www.gentoo.org/security/en/glsa/glsa-200612-16.xml

GNU Radius: Format string vulnerability
---------------------------------------

A format string vulnerability has been found in GNU Radius, which could l=
ead
to the remote execution of arbitrary code.

For more information, please see the GLSA Announcement[13]

  13. http://www.gentoo.org/security/en/glsa/glsa-200612-17.xml

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
5. Gentoo package moves
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

This section lists packages that have either been moved or added to the t=
ree
and packages that have had their "last rites" announcement given to be
removed in the future. The package removals come from many locations,
including the Treecleaners[14] and various developers. Most packages whic=
h
are listed under the Last Rites section are in need of some love and care
and can remain in the tree if proper maintainership is established.

  14. http://www.gentoo.org/proj/en/qa/treecleaners

Additions:
----------

Package:                            Addition date: Contact:
sci-biology/amap[15]                11 Dec 06      Donnie Berkholz[16]
virtual/init[17]                    12 Dec 06      Roy Marples[18]
games-fps/ut2004-unwheel[19]        12 Dec 06      Chris Gianelloni[20]
dev-libs/libisofs[21]               13 Dec 06      Steve Dibb[22]
games-fps/ut2004-damnation[23]      13 Dec 06      Chris Gianelloni[20]
games-fps/ut2004-muralis[24]        13 Dec 06      Chris Gianelloni[20]
net-print/splix[25]                 14 Dec 06      Wolfram Schlich[26]
x11-libs/goocanvas[27]              14 Dec 06      Michael Hanselmann[28]
dev-python/pygoocanvas[29]          14 Dec 06      Michael Hanselmann[28]
games-fps/ut2004-troopers[30]       15 Dec 06      Chris Gianelloni[20]
app-cdr/poweriso[31]                16 Dec 06      Jurek Bartuszek[32]
app-crypt/asedriveiiie-usb[33]      16 Dec 06      Alon Bar-Lev[34]
app-crypt/asedriveiiie-serial[35]   16 Dec 06      Alon Bar-Lev[34]
app-crypt/asekey[36]                16 Dec 06      Alon Bar-Lev[34]
x11-libs/xcb-util[37]               16 Dec 06      Joshua Baergen[38]
dev-ruby/ruby-pcap[39]              17 Dec 06      Nguyen Thai Ngoc Duy[4=
0]
dev-python/glewpy[41]               17 Dec 06      Joshua Baergen[38]
dev-cpp/libgtksourceviewmm[42]      17 Dec 06      R=C3=A9mi Cardona[43]
media-plugins/gst-plugins-pulse[44] 17 Dec 06      Jim Ramsay[45]
dev-util/nemiver[46]                17 Dec 06      R=C3=A9mi Cardona[43]

  15. http://packages.gentoo.org/?category=3Dsci-biology;name=3Damap
  16. [email protected]
  17. http://packages.gentoo.org/?category=3Dvirtual;name=3Dinit
  18. [email protected]
  19. http://packages.gentoo.org/?category=3Dgames-fps;name=3Dut2004-unwh=
eel
  20. [email protected]
  21. http://packages.gentoo.org/?category=3Ddev-libs;name=3Dlibisofs
  22. [email protected]
  23. http://packages.gentoo.org/?category=3Dgames-fps;name=3Dut2004-damn=
ation
  24. http://packages.gentoo.org/?category=3Dgames-fps;name=3Dut2004-mura=
lis
  25. http://packages.gentoo.org/?category=3Dnet-print;name=3Dsplix
  26. [email protected]
  27. http://packages.gentoo.org/?category=3Dx11-libs;name=3Dgoocanvas
  28. [email protected]
  29. http://packages.gentoo.org/?category=3Ddev-python;name=3Dpygoocanva=
s
  30. http://packages.gentoo.org/?category=3Dgames-fps;name=3Dut2004-troo=
pers
  31. http://packages.gentoo.org/?category=3Dapp-cdr;name=3Dpoweriso
  32. [email protected]
  33. http://packages.gentoo.org/?category=3Dapp-crypt;name=3Dasedriveiii=
e-usb
  34. [email protected]
  35. http://packages.gentoo.org/?category=3Dapp-crypt;name=3Dasedriveiii=
e-serial
  36. http://packages.gentoo.org/?category=3Dapp-crypt;name=3Dasekey
  37. http://packages.gentoo.org/?category=3Dx11-libs/xcb-util
  38. [email protected]
  39. http://packages.gentoo.org/?category=3Ddev-ruby;name=3Druby-pcap
  40. [email protected]
  41. http://packages.gentoo.org/?category=3Ddev-python;name=3Dglewpy
  42. http://packages.gentoo.org/?category=3Ddev-cpp;name=3Dlibgtksourcev=
iewmm
  43. [email protected]
  44. http://packages.gentoo.org/?category=3Dmedia-plugins;name=3Dgst-plu=
gins-pulse
  45. [email protected]
  46. http://packages.gentoo.org/?category=3Ddev-util;name=3Dnemiver

Removals:
---------

Package:                    Removal date: Contact:
games-fps/ut2004-domain2049 12 Dec 06     Chris Gianelloni[20]
dev-db/dbbalancer           17 Dec 06     Tiziano M=C3=BCller[47]

  20. [email protected]
  47. [email protected]

Last Rites:
-----------

Package:                   Removal date: Contact:
net-misc/cidr[48]          25 Dec 06     Elfyn McBratney[49]
dev-util/mergetrees[50]    25 Dec 06     Elfyn McBratney[49]
sys-fs/submount[51]        02 Jan 07     Daniel Drake[52]
games-fps/doomlegacy[53]   13 Jan 07     Michael Sterrett[54]
kde-misc/styleclock[55]    13 Jan 07     Charlie Shepherd[56]
media-sound/xmp[57]        14 Jan 07     Michael Sterrett[54]
app-emulation/i8086emu[58] 14 Jan 07     Michael Sterrett[54]
net-p2p/xmule[59]          15 Jan 07     Christian Faulhammer[60]
net-misc/ltsp[61]          15 Jan 07     Christian Faulhammer[60]
app-misc/nomad-tool[62]    15 Jan 07     George Shapovalov[63]

  48. http://packages.gentoo.org/?category=3Dnet-misc;name=3Dcidr
  49. [email protected]
  50. http://packages.gentoo.org/?category=3Ddev-util;name=3Dmergetrees
  51. http://packages.gentoo.org/?category=3Dsys-fs;name=3Dsubmount
  52. [email protected]
  53. http://packages.gentoo.org/?category=3Dgames-fps;name=3Ddoomlegacy
  54. [email protected]
  55. http://packages.gentoo.org/?category=3Dkde-misc;name=3Dstyleclock
  56. [email protected]
  57. http://packages.gentoo.org/?category=3Dmedia-sound;name=3Dxmp
  58. http://packages.gentoo.org/?category=3Dapp-emulation;name=3Di8086em=
u
  59. http://packages.gentoo.org/?category=3Dnet-p2p;name=3Dxmule
  60. [email protected]
  61. http://packages.gentoo.org/?category=3Dnet-misc;name=3Dltsp
  62. http://packages.gentoo.org/?category=3Dapp-misc;name=3Dnomad-tool
  63. [email protected]

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
6. Bugzilla
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Summary
-------

  * Statistics
  * Closed bug ranking
  * New bug rankings

Statistics
----------

The Gentoo community uses Bugzilla (bugs.gentoo.org[64]) to record and tr=
ack
bugs, notifications, suggestions and other interactions with the developm=
ent
team. Between 10 December 2006 and 17 December 2006, activity on the site
has resulted in:

  64. http://bugs.gentoo.org

  * 649 new bugs during this period
  * 342 bugs closed or resolved during this period
  * 25 previously closed bugs were reopened this period
  * 143 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this
    period
  * 163 bugs marked as duplicates during this period

Of the 10688 currently open bugs: 25 are labeled 'blocker', 96 are labele=
d
'critical', and 430 are labeled 'major'.

Closed bug rankings
-------------------

The developers and teams who have closed the most bugs during this period
are:

  * Gentoo's Team for Core System packages[65], with 35 closed bugs[66]
  * Gentoo Security[67], with 20 closed bugs[68]
  * Perl Devs @ Gentoo[69], with 16 closed bugs[70]
  * Default Assignee for Orphaned Packages[71], with 16 closed bugs[72]
  * Gentoo Games[73], with 15 closed bugs[74]
  * XFCE Team[75], with 14 closed bugs[76]
  * Gentoo Linux Gnome Desktop Team[77], with 11 closed bugs[78]
  * Gentoo KDE team[79], with 9 closed bugs[80]

  65. [email protected]
  66. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=
=3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-12-10&chfieldto=3D2006-=
12-17&resolution=3DFIXED&[email protected]
  67. [email protected]
  68. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=
=3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-12-10&chfieldto=3D2006-=
12-17&resolution=3DFIXED&[email protected]
  69. [email protected]
  70. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=
=3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-12-10&chfieldto=3D2006-=
12-17&resolution=3DFIXED&[email protected]
  71. [email protected]
  72. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=
=3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-12-10&chfieldto=3D2006-=
12-17&resolution=3DFIXED&[email protected]
  73. [email protected]
  74. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=
=3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-12-10&chfieldto=3D2006-=
12-17&resolution=3DFIXED&[email protected]
  75. [email protected]
  76. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=
=3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-12-10&chfieldto=3D2006-=
12-17&resolution=3DFIXED&[email protected]
  77. [email protected]
  78. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=
=3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-12-10&chfieldto=3D2006-=
12-17&resolution=3DFIXED&[email protected]
  79. [email protected]
  80. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status=
=3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2006-12-10&chfieldto=3D2006-=
12-17&resolution=3DFIXED&[email protected]

New bug rankings
----------------

The developers and teams who have been assigned the most new bugs during
this period are:

  * Default Assignee for New Packages[81], with 22 new bugs[82]
  * AMD64 Project[83], with 10 new bugs[84]
  * Mike Kelly[85], with 9 new bugs[86]
  * media-video herd[87], with 9 new bugs[88]
  * Gentoo's Team for Core System packages[65], with 8 new bugs[89]
  * Default Assignee for Orphaned Packages[71], with 7 new bugs[90]
  * Java team[91], with 6 new bugs[92]
  * Gentoo Linux Gnome Desktop Team[77], with 6 new bugs[93]

  65. [email protected]
  71. [email protected]
  77. [email protected]
  81. [email protected]
  82. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS=
SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-12-=
10&chfieldto=3D2006-12-17&[email protected]
  83. [email protected]
  84. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS=
SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-12-=
10&chfieldto=3D2006-12-17&[email protected]
  85. [email protected]
  86. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS=
SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-12-=
10&chfieldto=3D2006-12-17&[email protected]
  87. [email protected]
  88. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS=
SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-12-=
10&chfieldto=3D2006-12-17&[email protected]
  89. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS=
SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-12-=
10&chfieldto=3D2006-12-17&[email protected]
  90. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS=
SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-12-=
10&chfieldto=3D2006-12-17&[email protected]
  91. [email protected]
  92. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS=
SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-12-=
10&chfieldto=3D2006-12-17&[email protected]
  93. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS=
SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2006-12-=
10&chfieldto=3D2006-12-17&[email protected]

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
7. GWN feedback
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

The GWN is staffed by volunteers and members of the community who submit
ideas and articles. If you are interested in writing for the GWN, have
feedback on an article that we have posted, or just have an idea or artic=
le
that you would like to submit to the GWN, please send us your feedback[94=
]
and help make the GWN better.

  94. [email protected]

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
8. GWN subscription information
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D

To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
[email protected].

To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
[email protected] from the e-mail address you are subscri=
bed
under.

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
9. Other languages
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

The Gentoo Weekly Newsletter is also available in the following languages=
:

  * Chinese (Simplified)[95]
  * Danish[96]
  * Dutch[97]
  * English[98]
  * German[99]
  * Greek[100]
  * French[101]
  * Korean[102]
  * Japanese[103]
  * Italian[104]
  * Polish[105]
  * Portuguese (Brazil)[106]
  * Portuguese (Portugal)[107]
  * Russian[108]
  * Slovak[109]
  * Spanish[110]
  * Turkish[111]

  95. http://www.gentoo.org/news/zh_cn/gwn/gwn.xml
  96. http://www.gentoo.org/news/da/gwn/gwn.xml
  97. http://www.gentoo.org/news/nl/gwn/gwn.xml
  98. http://www.gentoo.org/news/en/gwn/gwn.xml
  99. http://www.gentoo.org/news/de/gwn/gwn.xml
 100. http://www.gentoo.org/news/el/gwn/gwn.xml
 101. http://www.gentoo.org/news/fr/gwn/gwn.xml
 102. http://www.gentoo.org/news/ko/gwn/gwn.xml
 103. http://www.gentoo.org/news/ja/gwn/gwn.xml
 104. http://www.gentoo.org/news/it/gwn/gwn.xml
 105. http://www.gentoo.org/news/pl/gwn/gwn.xml
 106. http://www.gentoo.org/news/pt_br/gwn/gwn.xml
 107. http://www.gentoo.org/news/pt/gwn/gwn.xml
 108. http://www.gentoo.org/news/ru/gwn/gwn.xml
 109. http://www.gentoo.org/news/sk/gwn/gwn.xml
 110. http://www.gentoo.org/news/es/gwn/gwn.xml
 111. http://www.gentoo.org/news/tr/gwn/gwn.xml

Ulrich Plate <[email protected]> - Editor
Chris Gianelloni <[email protected]> - Author


--=20
[email protected] mailing list