Gentoo Weekly Newsletter - Volume 3, Issue 15
Yuji Kosugi <[email protected]> Mon, 12 Apr 2004 19:48:38 -0400
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of April 12th, 2004.
---------------------------------------------------------------------------
==============
1. Gentoo News
==============
Gentoo Weekly Newsletter reorganizing
-------------------------------------
Recently we've been receiving emails from users about missing sections and
content in the newsletter. We've had some contributors leave the team, and
others have been unable to participate due to personal issues, but once we
start adding some new contributors to the team and reorganizing, we should
be right back on track. Those who responded to the recruitment drive last
week, please hold on as we determine what positions we need filled and
begin responding to applicants. Thanks to all our readers for reading the
newsletter each week; we'll bring back all our regular content as quickly
as possible.
Gentoo Linux Project seeking SAMBA developers
---------------------------------------------
The Gentoo Linux Project is seeking developers who have experience with
SAMBA. Send an email to [email protected] with some background info if
you're interested.
==================
2. Gentoo Security
==================
Insecure sandbox temporary lockfile vulnerabilities in Portage
--------------------------------------------------------------
A flaw has been found in the temporary file handling algorithms for the
sandboxing code used within Portage. Lockfiles created during normal
Portage operation of portage could be manipulated by local users resulting
in the truncation of hard linked files; causing a Denial of Service attack
on the system.
For more information, please see the GLSA Announcement[1]
1. http://www.gentoo.org/security/en/glsa/glsa-200404-01.xml
KDE Personal Information Management Suite Remote Buffer Overflow
Vulnerability
-------------
KDE-PIM may be vulnerable to a remote buffer overflow attack that may
allow unauthorized access to an affected system.
For more information, please see the GLSA Announcement[2]
2. http://www.gentoo.org/security/en/glsa/glsa-200404-02.xml
Tcpdump Vulnerabilities in ISAKMP Parsing
-----------------------------------------
There are multiple vulnerabilities in tcpdump and libpcap related to
parsing of ISAKMP packets.
For more information, please see the GLSA Announcement[3]
3. http://www.gentoo.org/security/en/glsa/glsa-200404-03.xml
Multiple vulnerabilities in sysstat
-----------------------------------
Multiple vulnerabilities in the way sysstat handles symlinks may allow an
attacker to execute arbitrary code or overwrite arbitrary files
For more information, please see the GLSA Announcement[4]
4. http://www.gentoo.org/security/en/glsa/glsa-200404-04.xml
ipsec-tools contains an X.509 certificates vulnerability.
---------------------------------------------------------
ipsec-tools contains a vulnerability that affects connections
authenticated with X.509 certificates.
For more information, please see the GLSA Announcement[5]
5. http://www.gentoo.org/security/en/glsa/glsa-200404-05.xml
Util-linux login may leak sensitive data
----------------------------------------
The login program included in util-linux could leak sensitive information
under certain conditions.
For more information, please see the GLSA Announcement[6]
6. http://www.gentoo.org/security/en/glsa/glsa-200404-06.xml
ClamAV RAR Archive Remote Denial Of Service Vulnerability
---------------------------------------------------------
ClamAV is vulnerable to a denial of service attack when processing certain
RAR archives.
For more information, please see the GLSA Announcement[7]
7. http://www.gentoo.org/security/en/glsa/glsa-200404-07.xml
GNU Automake symbolic link vulnerability
----------------------------------------
Automake may be vulnerable to a symbolic link attack which may allow an
attacker to modify data or elevate their privileges.
For more information, please see the GLSA Announcement[8]
8. http://www.gentoo.org/security/en/glsa/glsa-200404-08.xml
Cross-realm trust vulnerability in Heimdal
------------------------------------------
Heimdal contains cross-realm vulnerability allowing someone with control
over a realm to impersonate anyone in the cross-realm trust path.
For more information, please see the GLSA Announcement[9]
9. http://www.gentoo.org/security/en/glsa/glsa-200404-09.xml
iproute local Denial of Service vulnerability
---------------------------------------------
The iproute package allows local users to cause a denial of service.
For more information, please see the GLSA Announcement[10]
10. http://www.gentoo.org/security/en/glsa/glsa-200404-10.xml
Multiple Vulnerabilities in pwlib
---------------------------------
Multiple vulnerabilites have been found in pwlib that may lead to a remote
denial of service or buffer overflow attack.
For more information, please see the GLSA Announcement[11]
11. http://www.gentoo.org/security/en/glsa/glsa-200404-11.xml
Scorched 3D server chat box format string vulnerability
-------------------------------------------------------
Scorched 3D is vulnerable to a format string attack in the chat box that
leads to Denial of Service on the game server and possibly allows
execution of arbitrary code.
For more information, please see the GLSA Announcement[12]
12. http://www.gentoo.org/security/en/glsa/glsa-200404-12.xml
=========================
3. Heard in the Community
=========================
Web Forums
----------
Week of the Xorg
Two unusually active threads have developed last week providing opinions
and experience concerning the alternative to XFree86 some people have been
trying out lately. In any case, the forked X server from X.org certainly
looks popular enough to attract six pages worth of postings within just
three days since the creation of the discussion thread, and even the Howto
thread had dozens of Gentooists post addenda or corrections:
* experiences with xorg-x11-6.7.0[13]
* How I got x.org up and running[14]
13. http://forums.gentoo.org/viewtopic.php?t=158619
14. http://forums.gentoo.org/viewtopic.php?t=158911
=======================
4. Gentoo International
=======================
Italy/Switzerland: Joint GECHI and Ticino LUG Meeting
On Friday and Saturday, 16 and 17 April, the notorious GECHI[15] group of
Italian Gentoo users will join forces with the Ticino Linx User Group to
organize a friendly event at one of three SUPSI (Scuola Universitaria
Professionale della Svizzera Italiana) sites in Switzerland, this one
located in a town called Manno, not far from the Italian border. Dates and
times are to be taken with a grain of salt (check the TiLUG site[16] for
details), but the Forum coordination thread[17] appears to have everything
under control. And in any case, springtime in Ticino is supposed to be
lovely....
15. http://www.gechi.org/
16. http://tilug.org/cms/index.php?ind=14
17. http://forums.gentoo.org/viewtopic.php?t=157613
===========
5. Bugzilla
===========
Summary
-------
* Statistics
* Closed Bug Ranking
* New Bug Rankings
Statistics
----------
The Gentoo community uses Bugzilla (bugs.gentoo.org[18]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 03 April 2004 and 09 April 2004, activity on the
site has resulted in:
18. http://bugs.gentoo.org
* 642 new bugs during this period
* 336 bugs closed or resolved during this period
* 22 previously closed bugs were reopened this period
Of the 5570 currently open bugs: 128 are labeled 'blocker', 199 are
labeled 'critical', and 454 are labeled 'major'.
Closed Bug Rankings
-------------------
The developers and teams who have closed the most bugs during this period
are:
* Jeremy Huddleston[19], with 32 closed bugs[20]
* AMD64 Porting Team[21], with 22 closed bugs[22]
* Gentoo Linux Gnome Desktop Team[23], with 18 closed bugs[24]
* Gentoo KDE team[25], with 17 closed bugs[26]
* Gentoo Games team[27], with 15 closed bugs[28]
* x86 Kernel team[29], with 14 closed bugs[30]
* Gentoo Security[31], with 14 closed bugs[32]
* SpanKY[33], with 11 closed bugs[34]
19. [email protected]
20.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-04-03&chfieldto=2004-04-09&resolution=FIX
ED&[email protected]
21. [email protected]
22.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-04-03&chfieldto=2004-04-09&resolution=FIX
ED&[email protected]
23. [email protected]
24.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-04-03&chfieldto=2004-04-09&resolution=FIX
ED&[email protected]
25. [email protected]
26.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-04-03&chfieldto=2004-04-09&resolution=FIX
ED&[email protected]
27. [email protected]
28.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-04-03&chfieldto=2004-04-09&resolution=FIX
ED&[email protected]
29. [email protected]
30.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-04-03&chfieldto=2004-04-09&resolution=FIX
ED&[email protected]
31. [email protected]
32.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-04-03&chfieldto=2004-04-09&resolution=FIX
ED&[email protected]
33. [email protected]
34.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-04-03&chfieldto=2004-04-09&resolution=FIX
ED&[email protected]
New Bug Rankings
----------------
The developers and teams who have been assigned the most new bugs during
this period are:
* AMD64 Porting Team[35], with 31 new bugs[36]
* Gentoo Linux Gnome Desktop Team[37], with 28 new bugs[38]
* Gentoo's Team for Core System packages[39], with 21 new bugs[40]
* Jeremy Huddleston[41], with 11 new bugs[42]
* Net-Mail Packages[43], with 8 new bugs[44]
* Gentoo X-windows packagers[45], with 7 new bugs[46]
* Robert Coie[47], with 7 new bugs[48]
* Gentoo KDE team[49], with 7 new bugs[50]
35. [email protected]
36.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-04-03&chfieldto=2004-04
-09&[email protected]
37. [email protected]
38.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-04-03&chfieldto=2004-04
-09&[email protected]
39. [email protected]
40.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-04-03&chfieldto=2004-04
-09&[email protected]
41. [email protected]
42.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-04-03&chfieldto=2004-04
-09&[email protected]
43. [email protected]
44.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-04-03&chfieldto=2004-04
-09&[email protected]
45. [email protected]
46.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-04-03&chfieldto=2004-04
-09&[email protected]
47. [email protected]
48.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-04-03&chfieldto=2004-04
-09&[email protected]
49. [email protected]
50.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-04-03&chfieldto=2004-04
-09&[email protected]
==================
6. Tips and Tricks
==================
Shell Autologout with TMOUT
Adding the TMOUT environment variable to your shell startup scripts will
automatically log out of an interactive shell after the specified number
of seconds.
---------------------------------------------------------------------------
| Code Listing 6.1: |
| .bash_profile |
---------------------------------------------------------------------------
| |
|Timeout if no input is given for 1 hour |
|TMOUT=3600 |
| |
---------------------------------------------------------------------------
===========================
7. Moves, Adds, and Changes
===========================
Moves
-----
The following developers recently left the Gentoo team:
* none this week
Adds
----
The following developers recently joined the Gentoo Linux team:
* Jonathan Hood (squinky86) - accessibility, sword
* Yi Qiang (khai) - gnome
* Patrick Lauer (bonsaikitten) - cygwin, x86
* Danny Van (kugelfang) - amd64
* Roger Miliker (roger55) - releng
Changes
-------
The following developers recently changed roles within the Gentoo Linux
project:
* none this week
====================
8. Contribute to GWN
====================
Interested in contributing to the Gentoo Weekly Newsletter? Send us an
email[51].
51. [email protected]
===============
9. GWN Feedback
===============
Please send us your feedback[52] and help make the GWN better.
52. [email protected]
================================
10. GWN Subscription Information
================================
To subscribe to the Gentoo Weekly Newsletter, send a blank email to
[email protected].
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to
[email protected] from the email address you are
subscribed under.
===================
11. Other Languages
===================
The Gentoo Weekly Newsletter is also available in the following languages:
* Dutch[53]
* English[54]
* German[55]
* French[56]
* Japanese[57]
* Italian[58]
* Polish[59]
* Portuguese (Brazil)[60]
* Portuguese (Portugal)[61]
* Russian[62]
* Spanish[63]
* Turkish[64]
53. http://www.gentoo.org/news/be/gwn/gwn.xml
54. http://www.gentoo.org/news/en/gwn/gwn.xml
55. http://www.gentoo.org/news/de/gwn/gwn.xml
56. http://www.gentoo.org/news/fr/gwn/gwn.xml
57. http://www.gentoo.org/news/ja/gwn/gwn.xml
58. http://www.gentoo.org/news/it/gwn/gwn.xml
59. http://www.gentoo.org/news/pl/gwn/gwn.xml
60. http://www.gentoo.org/news/br/gwn/gwn.xml
61. http://www.gentoo.org/news/pt/gwn/gwn.xml
62. http://www.gentoo.org/news/ru/gwn/gwn.xml
63. http://www.gentoo.org/news/es/gwn/gwn.xml
64. http://www.gentoo.org/news/tr/gwn/gwn.xml
Yuji Carlos Kosugi <[email protected]> - Editor
AJ Armstrong <[email protected]> - Contributor
Brian Downey <[email protected]> - Contributor
Luke Giuliani <[email protected]> - Contributor
Grant Goodyear <[email protected]> - Contributor
Aron Griffis <[email protected]> - Contributor
Stuart Herbert <[email protected]> - Contributor
Kurt Lieber <[email protected]> - Contributor
Rafael Cordones Marcos <[email protected]> - Contributor
David Narayan <[email protected]> - Contributor
David Nielsen <[email protected]> - Contributor
Ulrich Plate <[email protected]> - Contributor
Simon Holm Thagersen <[email protected]> - Danish Translation
Jesper Brodersen <[email protected]> - Danish Translation
Arne Mejlholm <[email protected]> - Danish Translation
Hendrik Eeckhaut <[email protected]> - Dutch Translation
Jorn Eilander <[email protected]> - Dutch Translation
Bernard Kerckenaere <[email protected]> - Dutch Translation
Peter ter Borg <[email protected]> - Dutch Translation
Jochen Maes <[email protected]> - Dutch Translation
Roderick Goessen <[email protected]> - Dutch Translation
Gerard van den Berg <[email protected]> - Dutch Translation
Matthieu Montaudouin <[email protected]> - French Translation
Xavier Neys <[email protected]> - French Translation
Martin Prieto <[email protected]> - French Translation
Antoine Raillon <[email protected]> - French Translation
Sebastien Cevey <[email protected]> - French Translation
Jean-Christophe Choisy <[email protected]> - French Translation
Thomas Raschbacher <[email protected]> - German Translation
Steffen Lassahn <[email protected]> - German Translation
Matthias F. Brandstetter <[email protected]> - German Translation
Lukas Domagala <[email protected]> - German Translation
Tobias Scherbaum <[email protected]> - German Translation
Daniel Gerholdt <[email protected]> - German Translation
Marc Herren <[email protected]> - German Translation
Tobias Matzat <[email protected]> - German Translation
Marco Mascherpa <[email protected]> - Italian Translation
Claudio Merloni <[email protected]> - Italian Translation
Stefano Lucidi <[email protected]> - Italian Translation
Katuyuki Konno <[email protected]> - Japanese Translation
Hiroyuki Takeda <[email protected]> - Japanese Translation
Masato Hatakeyama <[email protected]> - Japanese Translation
Masayoshi Nakamura <[email protected]> - Japanese Translation
Yasunori Fukudome <[email protected]> - Japanese Translation
Tomoyuki Sakurai <[email protected]> - Japanese Translation
Lukasz Strzygowski <[email protected]> - Polish Translation
Karol Goralski <[email protected]> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <[email protected]> - Portuguese
(Brazil) Translation
Eduardo Belloti <[email protected]> - Portuguese (Brazil) Translation
Jo??o Rafael Moraes Nicola <[email protected]> - Portuguese (Brazil)
Translation
Marcelo Gon??alves de Azambuja <[email protected]> - Portuguese
(Brazil) Translation
Otavio Rodolfo Piske <[email protected]> - Portuguese (Brazil)
Translation
Pablo N. Hess -- NatuNobilis <[email protected]> - Portuguese
(Brazil) Translation
Pedro de Medeiros <[email protected]> - Portuguese (Brazil) Translation
Ventura Barbeiro <[email protected]> - Portuguese (Brazil)
Translation
Bruno Ferreira <[email protected]> - Portuguese (Portugal)
Translation
Gustavo Felisberto <[email protected]> - Portuguese (Portugal)
Translation
Jos?? Costa <[email protected]> - Portuguese (Portugal) Translation
Luis Medina <[email protected]> - Portuguese (Portugal) Translation
Ricardo Loureiro <[email protected]> - Portuguese (Portugal) Translation
Aleksandr Martyncev <[email protected]> - Russian Translator
Sergey Galkin <[email protected]> - Russian Translator
Sergey Kuleshov <[email protected]> - Russian Translator
Alex Spirin <[email protected]> - Russian Translator
Denis Zaletov <[email protected]> - Russian Translator
Lanark <[email protected]> - Spanish Translation
Fernando J. Pereda <[email protected]> - Spanish Translation
Lluis Peinado Cifuentes <[email protected]> - Spanish Translation
Zephryn Xirdal T <[email protected]> - Spanish Translation
Guillermo Juarez <[email protected]> - Spanish Translation
Jes??s Garc??a Crespo <[email protected]> - Spanish Translation
Carlos Castillo <[email protected]> - Spanish Translation
Julio Castillo <[email protected]> - Spanish Translation
Sergio G??mez <[email protected]> - Spanish Translation
Aycan Irican <[email protected]> - Turkish Translation
Bugra Cakir <[email protected]> - Turkish Translation
Cagil Seker <[email protected]> - Turkish Translation
Emre Kazdagli <[email protected]> - Turkish Translation
Evrim Ulu <[email protected]> - Turkish Translation
Gursel Kaynak <[email protected]> - Turkish Translation
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAeyrW9QP4LZPv56cRAtpIAKCiQrqxG2uaWZQc8ZxX5AxOK39RoACffcQa asr2bOUT4W2nxFq2pT+Ifzg= =r46H -----END PGP SIGNATURE-----