Gentoo Weekly Newsletter 9 April 2007
Chris Gianelloni <[email protected]> Tue, 17 Apr 2007 09:25:03 -0400
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/20070409-newsletter.xml This is the Gentoo Weekly Newsletter for the week of 9 April 2007. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 1. Developer of the Week =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Camille Huot, aka cam --------------------- Figure 1.1: Camille Huot, aka cam http://www.gentoo.org/images/gwn/20070409_cam.jpg 26 year old Camille Huot[1] is one of our French developers. He lives and works in Paris, France, but was born in La Ciotat, which is near Marseill= es in southern France. Camille lives together with his brother, who has recently finished school and started working as a C++ developer. 1. [email protected] Cam studied at the University of Montpellier, and graduated with a Bachel= or in 'Telecommunications and Network'. Later on he completed his studies wi= th a Masters degree. He was employed some time back as Linux Systems Administrator, but got promoted recently to Oracle DB Administration. He'= s currently in charge of ~150 servers at the Wanadoo hosting platform. Camille learned Linux (Red Hat and Debian) at school. Later on, he switch= ed to FreeBSD, which he kept for some years, but finally 'had' to come back = to Linux due to a DSL driver. G=C3=A9rald Fenoy[2] convinced Camille to try = Gentoo, and he liked it :-) 2. [email protected] Within Gentoo, Camille leads the French translation team. They currently have a well-oiled team, and translate quite a few documents. He's also interested in joining the Gentoo/FreeBSD team. Camille was recruited in January '04 by Xavier Neys[3], who has recently turned over the torch of French Lead translator to Camille. 3. [email protected] When Camille fires up his desktop, he uses: openbox, psi, opera, urxvt, claws-mail, mplayer, gvim and some Google apps. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 2. Tips and Tricks =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Removing Specific Dependencies ------------------------------ Have you ever installed something with a lot of dependencies? Have you ev= er wanted to remove that package along with all of its dependencies? Instinc= t may tell us that we can run emerge --depclean, however there is a differe= nt, perhaps better way. Lets say that we want to compare OpenOffice.org and koffice. Our plan is = to install both, try them out, and remove one of them. First, do: +------------------------------------------------------------------------= --------+ | Code Listing 2.1 = | | Creating .deps files = | +------------------------------------------------------------------------= --------+ | # emerge openoffice -p | sed -ne \ = | | '/^\[ebuild[^]]*N[^]]*\]/{s/^\[ebuild[^]]\+\] \([^[:space:]]\+\).*$/=3D= \1/;p}' \ | | > openoffice.deps = | | # emerge koffice-meta -p | sed -ne \ = | | '/^\[ebuild[^]]*N[^]]*\]/{s/^\[ebuild[^]]\+\] \([^[:space:]]\+\).*$/=3D= \1/;p}' \ | | > koffice.deps = | +------------------------------------------------------------------------= --------+ This will ensure that we do not record any packages that are being update= d. Proceed to install and try the programs. Once you chose which one you wan= t to keep, simply do the following: +------------------------------------------------------------------------= ---+ | Code Listing 2.2 = | | Removing unused package/dependencies = | +------------------------------------------------------------------------= ---+ | # emerge -aC $(<openoffice.deps) = | +------------------------------------------------------------------------= ---+ This week's Tips and Tricks was inspired by the following posting on the forums: * http://forums.gentoo.org/viewtopic-t-531232.html =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 3. Gentoo developer moves =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Moves ----- The following developers recently left the Gentoo project: * Alec Warner (antarus) * Simon Stelling (blubb) Adds ---- The following developers recently joined the Gentoo project: * none this week Changes ------- The following developers recently changed roles within the Gentoo project= : * none this week =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 4. Gentoo security =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Asterisk: Two SIP Denial of Service vulnerabilities --------------------------------------------------- Asterisk is vulnerable to two Denial of Service issues in the SIP channel. For more information, please see the GLSA Announcement[4] 4. http://www.gentoo.org/security/en/glsa/glsa-200704-01.xml MIT Kerberos 5: Arbitrary remote code execution ----------------------------------------------- Multiple vulnerabilities in MIT Kerberos 5 could potentially result in unauthenticated remote root code execution. For more information, please see the GLSA Announcement[5] 5. http://www.gentoo.org/security/en/glsa/glsa-200704-02.xml OpenAFS: Privilege escalation ----------------------------- OpenAFS is subject to a design flaw that could allow privilege escalation= on the client. For more information, please see the GLSA Announcement[6] 6. http://www.gentoo.org/security/en/glsa/glsa-200704-03.xml OpenPBS: Multiple vulnerabilities --------------------------------- OpenPBS contains unspecified vulnerabilities which may allow for the remo= te execution of arbitrary code or a Denial of Service. For more information, please see the GLSA Announcement[7] 7. http://www.gentoo.org/security/en/glsa/glsa-200704-04.xml zziplib: Buffer Overflow ------------------------ The zziplib library contains a buffer overflow vulnerability that could l= ead to user-assisted remote execution of arbitrary code. For more information, please see the GLSA Announcement[8] 8. http://www.gentoo.org/security/en/glsa/glsa-200704-05.xml Evince: Stack overflow in included gv code ------------------------------------------ Evince improperly handles user-supplied data possibly allowing for the execution of arbitrary code. For more information, please see the GLSA Announcement[9] 9. http://www.gentoo.org/security/en/glsa/glsa-200704-06.xml libwpd: Multiple vulnerabilities -------------------------------- libwpd is vulnerable to several heap overflows and an integer overflow. For more information, please see the GLSA Announcement[10] 10. http://www.gentoo.org/security/en/glsa/glsa-200704-07.xml =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 5. Gentoo package moves =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D This section lists packages that have either been moved or added to the t= ree and packages that have had their "last rites" announcement given to be removed in the future. The package removals come from many locations, including the Treecleaners[11] and various developers. Most packages whic= h are listed under the Last Rites section are in need of some love and care and can remain in the tree if proper maintainership is established. 11. http://www.gentoo.org/proj/en/qa/treecleaners Removals: --------- Package: Removal date: Contact: games-board/pysol-cardsets 02 Apr 2007 Alfredo Tupone[12] net-news/hellanzb 05 Apr 2007 Alexis Ballier[13] x11-misc/klineakconfig 06 Apr 2007 Stefan Schweizer[14] net-print/foomatic 07 Apr 2007 Stefan Schweizer[14] dev-util/ecletex 07 Apr 2007 Petteri R=C3=A4ty[15] dev-util/eclipse-cdt 07 Apr 2007 Petteri R=C3=A4ty[15] 12. [email protected] 13. [email protected] 14. [email protected] 15. [email protected] Additions: ---------- Package: Addition date: Contact: games-sports/toycars[16] 02 Apr 2007 Alfredo Tupone[12] dev-util/duma[17] 03 Apr 2007 Steve Arnold[18] perl-core/Math-BigRat[19] 03 Apr 2007 Michael Cummings[20] perl-core/bignum[21] 03 Apr 2007 Michael Cummings[20] net-misc/italc[22] 03 Apr 2007 Markus Ullmann[23] net-nntp/hellanzb[24] 05 Apr 2007 Alexis Ballier[13] media-video/mplayerthumbs[25] 06 Apr 2007 Stefan Schweizer[14] net-wireless/aircrack-ptw[26] 06 Apr 2007 Lars Weiler[27] net-misc/x-lite[28] 07 Apr 2007 Markus Ullmann[23] kde-misc/metamonitor[29] 07 Apr 2007 Markus Ullmann[23] sys-auth/pam_abl[30] 07 Apr 2007 Markus Ullmann[23] sys-auth/pam_sha512[31] 07 Apr 2007 Markus Ullmann[23] net-analyzer/zniper[32] 07 Apr 2007 Markus Ullmann[23] dev-libs/liblazy[33] 08 Apr 2007 Stefan Schweizer[14] dev-python/pkipplib[34] 08 Apr 2007 Bryan =C3=98stergaard[35] 12. [email protected] 13. [email protected] 14. [email protected] 16. http://packages.gentoo.org/packages/?category=3Dgames-sports;name=3D= toycars 17. http://packages.gentoo.org/packages/?category=3Ddev-util;name=3Ddum= a 18. [email protected] 19. http://packages.gentoo.org/packages/?category=3Dperl-core;name=3DMa= th-BigRat 20. [email protected] 21. http://packages.gentoo.org/packages/?category=3Dperl-core;name=3Dbi= gnum 22. http://packages.gentoo.org/packages/?category=3Dnet-misc;name=3Dita= lc 23. [email protected] 24. http://packages.gentoo.org/packages/?category=3Dnet-nntp;name=3Dhel= lanzb 25. http://packages.gentoo.org/packages/?category=3Dmedia-video;name=3D= mplayerthumbs 26. http://packages.gentoo.org/packages/?category=3Dnet-wireless;name=3D= aircrack-ptw 27. [email protected] 28. http://packages.gentoo.org/packages/?category=3Dnet-misc;name=3Dx-l= ite 29. http://packages.gentoo.org/packages/?category=3Dkde-misc;name=3Dmet= amonitor 30. http://packages.gentoo.org/packages/?category=3Dsys-auth;name=3Dpam= _abl 31. http://packages.gentoo.org/packages/?category=3Dsys-auth;name=3Dpam= _sha512 32. http://packages.gentoo.org/packages/?category=3Dnet-analyzer;name=3D= zniper 33. http://packages.gentoo.org/packages/?category=3Ddev-libs;name=3Dlib= lazy 34. http://packages.gentoo.org/packages/?category=3Ddev-python;name=3Dp= kipplib 35. [email protected] Last Rites: ----------- Package: Removal date: Contact: dev-java/aterm-java[36] 06 May 2007 Petteri R=C3=A4ty[15] dev-db/c-jdbc[37] 08 May 2007 Petteri R=C3=A4ty[15] 15. [email protected] 36. http://packages.gentoo.org/packages/?category=3Ddev-java;name=3Date= rm-java 37. http://packages.gentoo.org/packages/?category=3Ddev-db;name=3Dc-jdb= c =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 6. Bugzilla =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Summary ------- * Statistics * Closed bug ranking * New bug rankings Statistics ---------- The Gentoo community uses Bugzilla (bugs.gentoo.org[38]) to record and tr= ack bugs, notifications, suggestions and other interactions with the developm= ent team. Between 01 April 2007 and 08 April 2007, activity on the site has resulted in: 38. http://bugs.gentoo.org * 513 new bugs during this period * 441 bugs closed or resolved during this period * 23 previously closed bugs were reopened this period * 161 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period * 87 bugs marked as duplicates during this period Of the 10000 currently open bugs: 14 are labeled 'blocker', 97 are labele= d 'critical', and 353 are labeled 'major'. Closed bug rankings ------------------- The developers and teams who have closed the most bugs during this period are: * Java team[39], with 22 closed bugs[40] * Gentoo KDE team[41], with 21 closed bugs[42] * Gentoo Security[43], with 15 closed bugs[44] * Gentoo's Team for Core System packages[45], with 15 closed bugs[46] * Printing Team[47], with 14 closed bugs[48] * TeX herd[49], with 12 closed bugs[50] * Hanno Boeck[51], with 12 closed bugs[52] * Development Tools Herd[53], with 12 closed bugs[54] 39. [email protected] 40. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2007-04-01&chfieldto=3D2007-= 04-08&resolution=3DFIXED&[email protected] 41. [email protected] 42. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2007-04-01&chfieldto=3D2007-= 04-08&resolution=3DFIXED&[email protected] 43. [email protected] 44. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2007-04-01&chfieldto=3D2007-= 04-08&resolution=3DFIXED&[email protected] 45. [email protected] 46. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2007-04-01&chfieldto=3D2007-= 04-08&resolution=3DFIXED&[email protected] 47. [email protected] 48. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2007-04-01&chfieldto=3D2007-= 04-08&resolution=3DFIXED&[email protected] 49. [email protected] 50. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2007-04-01&chfieldto=3D2007-= 04-08&resolution=3DFIXED&[email protected] 51. [email protected] 52. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2007-04-01&chfieldto=3D2007-= 04-08&resolution=3DFIXED&[email protected] 53. [email protected] 54. http://bugs.gentoo.org/buglist.cgi?bug_status=3DRESOLVED&bug_status= =3DCLOSED&chfield=3Dbug_status&chfieldfrom=3D2007-04-01&chfieldto=3D2007-= 04-08&resolution=3DFIXED&[email protected] New bug rankings ---------------- The developers and teams who have been assigned the most new bugs during this period are: * Default Assignee for New Packages[55], with 21 new bugs[56] * Default Assignee for Orphaned Packages[57], with 9 new bugs[58] * AMD64 Project[59], with 9 new bugs[60] * PHP Bugs[61], with 5 new bugs[62] * Alpha Porters[63], with 5 new bugs[64] * Robin Johnson[65], with 4 new bugs[66] * Gentoo Kernel Bug Wranglers and Kernel Maintainers[67], with 4 new bugs[68] * Java team[39], with 4 new bugs[69] 39. [email protected] 55. [email protected] 56. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2007-04-= 01&chfieldto=3D2007-04-08&[email protected] 57. [email protected] 58. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2007-04-= 01&chfieldto=3D2007-04-08&[email protected] 59. [email protected] 60. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2007-04-= 01&chfieldto=3D2007-04-08&[email protected] 61. [email protected] 62. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2007-04-= 01&chfieldto=3D2007-04-08&[email protected] 63. [email protected] 64. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2007-04-= 01&chfieldto=3D2007-04-08&[email protected] 65. [email protected] 66. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2007-04-= 01&chfieldto=3D2007-04-08&[email protected] 67. [email protected] 68. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2007-04-= 01&chfieldto=3D2007-04-08&[email protected] 69. http://bugs.gentoo.org/buglist.cgi?bug_status=3DNEW&bug_status=3DAS= SIGNED&bug_status=3DREOPENED&chfield=3Dassigned_to&chfieldfrom=3D2007-04-= 01&chfieldto=3D2007-04-08&[email protected] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 7. GWN feedback =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D The GWN is staffed by volunteers and members of the community who submit ideas and articles. If you are interested in writing for the GWN, have feedback on an article that we have posted, or just have an idea or artic= le that you would like to submit to the GWN, please send us your feedback[70= ] and help make the GWN better. 70. [email protected] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D 8. GWN subscription information =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to [email protected]. To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to [email protected] from the e-mail address you are subscri= bed under. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 9. Other languages =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D The Gentoo Weekly Newsletter is also available in the following languages= : * Chinese (Simplified)[71] * Dutch[72] * English[73] * German[74] * Greek[75] * French[76] * Korean[77] * Japanese[78] * Italian[79] * Polish[80] * Portuguese (Brazil)[81] * Portuguese (Portugal)[82] * Russian[83] * Slovak[84] * Spanish[85] * Turkish[86] 71. http://www.gentoo.org/news/zh_cn/gwn/gwn.xml 72. http://www.gentoo.org/news/nl/gwn/gwn.xml 73. http://www.gentoo.org/news/en/gwn/gwn.xml 74. http://www.gentoo.org/news/de/gwn/gwn.xml 75. http://www.gentoo.org/news/el/gwn/gwn.xml 76. http://www.gentoo.org/news/fr/gwn/gwn.xml 77. http://www.gentoo.org/news/ko/gwn/gwn.xml 78. http://www.gentoo.org/news/ja/gwn/gwn.xml 79. http://www.gentoo.org/news/it/gwn/gwn.xml 80. http://www.gentoo.org/news/pl/gwn/gwn.xml 81. http://www.gentoo.org/news/pt_br/gwn/gwn.xml 82. http://www.gentoo.org/news/pt/gwn/gwn.xml 83. http://www.gentoo.org/news/ru/gwn/gwn.xml 84. http://www.gentoo.org/news/sk/gwn/gwn.xml 85. http://www.gentoo.org/news/es/gwn/gwn.xml 86. http://www.gentoo.org/news/tr/gwn/gwn.xml Chris Gianelloni <[email protected]> - Editor Dimitry Bradt <[email protected]> - Author Andrey Falko <[email protected]> - Author --=20 [email protected] mailing list