Gentoo Weekly Newsletter -- Volume 3, Issue 32

---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of August 9th, 2004.
---------------------------------------------------------------------------
 
==============
1. Gentoo News
==============
  
Gentoo at Linux World Expo
--------------------------
  
Marking our fourth consecutive Linux World Expo, Gentoo Linux was on hand 
at the recent San Francisco event. As with previous shows, the Gentoo 
booth was located in the .org pavillion. Nominated for the Best Open 
Source Solution (though beaten out by Firefox), the Gentoo booth was quite 
busy throughout the show. With a mixture of new people wanting to find out 
more about Gentoo and veteran users thanking the developers for their hard 
work, the show allowed Gentoo to reach out to users new and old. Another 
benefit was the chance for many of the Gentoo developers to meet 
face-to-face for the first time. 
 
Also at the show, a Birds of a Feather meeting was held, which is an 
informal, after-hours meeting where users had a chance to interact with 
the developers on a one-to-one basis. This meeting drew far larger numbers 
than were originally expected, with over 50 people in attendance.
 
To all the folks who stopped by the Gentoo booth, thank you for showing 
your support. To anyone who was unable to make it, we'll be at the next 
Linux World Expo in Boston, February 14th through 17th! 
 
Update on the Gentoo Website Redesign
-------------------------------------
  
As an update to the previously announced[1] website redesign contest, a 
number of excellent submissions were received from our users. Overall, we 
had more than two dozen responses from which five have been selected as 
finalists. We are currently awaiting confirmation from those finalists 
that they are indeed willing to complete their design and participate in 
the actual project. As soon as we have those confirmations, we will post 
the five finalists and allow the community to select a winner. 

 1. http://www.gentoo.org/news/en/gwn/20040705-newsletter.xml
    
==================
2. Gentoo Security
==================
   
Courier: Cross-site scripting vulnerability in SqWebMail 
 
The SqWebMail web application, included in the Courier suite, is 
vulnerable to cross-site scripting attacks.
 
For more information, please see the GLSA Announcement[2]

 2. http://www.gentoo.org/security/en/glsa/glsa-200408-02.xml
 
libpng: Numerous vulnerabilities 
 
libpng contains numerous vulnerabilities potentially allowing an attacker 
to perform a Denial of Service attack or even execute arbitrary code.
 
For more information, please see the GLSA Announcement[3]

 3. http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml
 
PuTTY: Pre-authentication arbitrary code execution 
 
PuTTY contains a vulnerability allowing a SSH server to execute arbitrary 
code on the connecting client.
 
For more information, please see the GLSA Announcement[4]

 4. http://www.gentoo.org/security/en/glsa/glsa-200408-04.xml
 
Opera: Multiple new vulnerabilities 
 
Several new vulnerabilities were found and fixed in Opera, including one 
allowing an attacker to read the local filesystem remotely.
 
For more information, please see the GLSA Announcement[5]

 5. http://www.gentoo.org/security/en/glsa/glsa-200408-05.xml
    
=================================
3. Featured Developer of the Week
=================================
   
Featured Developer is on hiatus this week. 
    
=========================
4. Heard in the Community
=========================
  
gentoo-user
-----------
  
DVD Burning under Linux
 
DVD burning under Linux has become easier and easier in the past months 
due to the enhancements in the 2.6 kernel series. Yet, the issues are 
still there--but now due to the myriad of DVD-burning drives. DVD+R, 
DVD-R, single-layer, dual-layer, etc. Scott Taylor did the list a favor 
with a great write up that sums up the differences, as well as a 
recommendation on the type of drive he prefers. Also check out the related 
thread on dual-layer burners. 
 
 * Good DVD burner?[6] 
 * dual layer DVD burners[7] 
 
 6. http://thread.gmane.org/gmane.linux.gentoo.user/92637
 7. http://thread.gmane.org/gmane.linux.gentoo.user/92134

 
"Weird" Executables in /bin
 
What's that left-bracket doing there in /bin? If you're curious, check out 
this thread[8]. 

 8. http://thread.gmane.org/gmane.linux.gentoo.user/91498
 
Upgrading Perl
 
Do you rebuild your perl libraries after an upgrade? You should! Although 
indispensable as a scripting and admin tool, upgrading perl involves a 
good number of reverse dependencies. Gentoo provides the libperl_rebuilder 
script (/usr/portage/dev-lang/perl/files/libperl_rebuilder) which can 
allieviate some of the issues and keep your perl running smoothly. 
However, if you happen to be using "ACCEPT_KEYWORDS" there may experience 
some problems. List member Holly Bostick and our resident developer 
Spider, help clear up the confusion and make the upgrade process easier. 
 
 * Upgrading Perl[9] 
 
 9. http://thread.gmane.org/gmane.linux.gentoo.user/92561

    
Web Forums
----------
  
For Real: Realplayer 10 
 
Real Networks[10] announced last Monday that their latest release, 
RealPlayer 10 Gold, is now available to Linux users. RealPlayer 10 is 
identical to the fully open-sourced Helix Player 1.0[11] (released on the 
same day), but has added support for Real's own audio and video formats, 
MP3 and Flash playback. While Gentoo users in the Forum have greeted the 
news with excitement, an official RealPlayer ebuild will have to wait for 
Gentoo develeoper Chris White do quality checks and get Real's endorsement 
for inclusion of their flagship application in the Portage tree. If you 
want to help Chris conducting the necessary tests, contact him by 
email[12]: 

 * Realplayer 10[13] 
 
 10. http://www.real.com/linux
 11. https://player.helixcommunity.org/
 12. [email protected]
 13. http://forums.gentoo.org/viewtopic.php?t=205874
 
Useful USE Tools 
 
Italian Forum user xchris[14] has written a handy bash script that 
analyzes which packages have been compiled with or without a supported USE 
flag, available for download at his own website. In case you forgot to 
include an important feature in several packages, you might like to simply 
redirect the output of "usetool -nu [use flag] -nc" straight to emerge. 
And if you'd like to know what USE flags actually are being supported by 
packages first, try singular[15]'s concise Python script (based on 
gentoolkit) that puts an end to the old recursive grepping routine people 
had to rely on so far: 
 
 * TOOL - Usetool for useflag analisys[16] 
 * finduse Python script[17] 

 14. http://forums.gentoo.org/profile.php?mode=viewprofile&u=24619
 15. http://forums.gentoo.org/profile.php?mode=viewprofile&u=22126
 16. http://forums.gentoo.org/viewtopic.php?t=203823
 17. http://forums.gentoo.org/viewtopic.php?p=1402407#1402407

=======================
5. Gentoo International
=======================
   
Italy: MOCA Reminder, 20-22 August 
 
Ten days before MOCA, the Italian geek camp[18], opens its 
doo^H^H^Hflysheets in Pescara, and as many as seventeen Gentoo users have 
confirmed their participation in this event organised by Metro Olografix 
activists on the Adriatic coast. If you're interested in joining in the 
fun, check our earlier report[19] for details, and let the others know 
you're coming at this forum thread[20] (in Italian, preferrably). 

 18. http://camp.olografix.org/
 19. http://www.gentoo.org/news/en/gwn/20040628-newsletter.xml#doc_chap6
 20. http://forums.gentoo.org/viewtopic.php?t=187116
     
At DEFCON 12 this past weekend, several Gentoo Linux machines were sighted 
in the RootFu[21] competition. Gentoo's "less is more" attitude for Stage1 
installs makes it advantageous for security-minded folks. There were other 
Gentoo sightings as well: Several of the conferences used Gentoo machines 
for demonstrations, and many were sighted on user's laptops. 

 21. http://www.ghettohackers.net/rootfu/
    
===========
6. Bugzilla
===========
  
Summary
-------
  
 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
    
Statistics
----------
  
The Gentoo community uses Bugzilla (bugs.gentoo.org[22]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 31 July 2004 and 06 August 2004, activity on the 
site has resulted in: 

 22. http://bugs.gentoo.org
 
 * 615 new bugs during this period 
 * 356 bugs closed or resolved during this period 
 * 18 previously closed bugs were reopened this period 
 
Of the 7016 currently open bugs: 134 are labeled 'blocker', 201 are 
labeled 'critical', and 549 are labeled 'major'. 
    
Closed Bug Rankings
-------------------
  
The developers and teams who have closed the most bugs during this period 
are: 
 
 * Portage Team[23], with 35 closed bugs[24]  
 * Sven Vermeulen[25], with 32 closed bugs[26]  
 * AMD64 Porting Team[27], with 22 closed bugs[28]  
 * Heinrich Wendel[29], with 12 closed bugs[30]  
 * Gentoo Linux Gnome Desktop Team[31], with 12 closed bugs[32]  
 
 23. [email protected]
 24. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-31&chfieldto=2004-08-06&resolution=FIX
ED&[email protected]
 25. [email protected]
 26. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-31&chfieldto=2004-08-06&resolution=FIX
ED&[email protected]
 27. [email protected]
 28. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-31&chfieldto=2004-08-06&resolution=FIX
ED&[email protected]
 29. [email protected]
 30. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-31&chfieldto=2004-08-06&resolution=FIX
ED&[email protected]
 31. [email protected]
 32. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-31&chfieldto=2004-08-06&resolution=FIX
ED&[email protected]

    
New Bug Rankings
----------------
  
The developers and teams who have been assigned the most new bugs during 
this period are: 
 
 * AMD64 Porting Team[33], with 47 new bugs[34]  
 * OSX Porters[35], with 17 new bugs[36]  
 * Gentoo Linux Gnome Desktop Team[37], with 14 new bugs[38]  
 * Perl Devs[39], with 10 new bugs[40]  
 * Java team[41], with 10 new bugs[42]  
 
 33. [email protected]
 34. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-31&chfieldto=2004-08
-06&[email protected]
 35. [email protected]
 36. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-31&chfieldto=2004-08
-06&[email protected]
 37. [email protected]
 38. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-31&chfieldto=2004-08
-06&[email protected]
 39. [email protected]
 40. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-31&chfieldto=2004-08
-06&[email protected]
 41. [email protected]
 42. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-31&chfieldto=2004-08
-06&[email protected]

    
==================
7. Tips and Tricks
==================
   
Tips and Tricks is looking for a new owner. If you're interested in taking 
over this section of the GWN, please email [email protected][43]. 

 43. mailto:[email protected]
    
===========================
8. Moves, Adds, and Changes
===========================
  
Moves
-----
  
The following developers recently left the Gentoo team:
 
 * None this week 
    
Adds
----
  
The following developers recently joined the Gentoo Linux team:
 
 * None this week 
    
Changes
-------
  
The following developers recently changed roles within the Gentoo Linux 
project:
 
 * None this week 
    
====================
9. Contribute to GWN
====================
   
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 
email[44].

 44. [email protected]
    
================
10. GWN Feedback
================
   
Please send us your feedback[45] and help make the GWN better.

 45. [email protected]
    
================================
11. GWN Subscription Information
================================
   
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
[email protected].
 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
[email protected] from the email address you are 
subscribed under.
    
===================
12. Other Languages
===================
   
The Gentoo Weekly Newsletter is also available in the following languages:
 
 * Danish[46] 
 * Dutch[47] 
 * English[48] 
 * German[49] 
 * French[50] 
 * Japanese[51] 
 * Italian[52] 
 * Polish[53] 
 * Portuguese (Brazil)[54] 
 * Portuguese (Portugal)[55] 
 * Russian[56] 
 * Spanish[57] 
 * Turkish[58] 
 
 46. http://www.gentoo.org/news/da/gwn/gwn.xml
 47. http://www.gentoo.org/news/be/gwn/gwn.xml
 48. http://www.gentoo.org/news/en/gwn/gwn.xml
 49. http://www.gentoo.org/news/de/gwn/gwn.xml
 50. http://www.gentoo.org/news/fr/gwn/gwn.xml
 51. http://www.gentoo.org/news/ja/gwn/gwn.xml
 52. http://www.gentoo.org/news/it/gwn/gwn.xml
 53. http://www.gentoo.org/news/pl/gwn/gwn.xml
 54. http://www.gentoo.org/news/br/gwn/gwn.xml
 55. http://www.gentoo.org/news/pt/gwn/gwn.xml
 56. http://www.gentoo.org/news/ru/gwn/gwn.xml
 57. http://www.gentoo.org/news/es/gwn/gwn.xml
 58. http://www.gentoo.org/news/tr/gwn/gwn.xml

   
Yuji Carlos Kosugi <[email protected]> - Editor
AJ Armstrong <[email protected]> - Contributor
Brian Downey <[email protected]> - Contributor
Kurt Lieber <[email protected]> - Contributor
Ulrich Plate <[email protected]> - Contributor
Sven Vermeulen <[email protected]> - Contributor
Simon Holm Thagersen <[email protected]> - Danish Translation
Jesper Brodersen <[email protected]> - Danish Translation
Arne Mejlholm <[email protected]> - Danish Translation
Hendrik Eeckhaut <[email protected]> - Dutch Translation
Jorn Eilander <[email protected]> - Dutch Translation
Bernard Kerckenaere <[email protected]> - Dutch Translation
Peter ter Borg <[email protected]> - Dutch Translation
Jochen Maes <[email protected]> - Dutch Translation
Roderick Goessen <[email protected]> - Dutch Translation
Gerard van den Berg <[email protected]> - Dutch Translation
Matthieu Montaudouin <[email protected]> - French Translation
Xavier Neys <[email protected]> - French Translation
Martin Prieto <[email protected]> - French Translation
Antoine Raillon <[email protected]> - French Translation
Sebastien Cevey <[email protected]> - French Translation
Jean-Christophe Choisy <[email protected]> - French Translation
Thomas Raschbacher <[email protected]> - German Translation
Steffen Lassahn <[email protected]> - German Translation
Matthias F. Brandstetter <[email protected]> - German Translation
Lukas Domagala <[email protected]> - German Translation
Tobias Scherbaum <[email protected]> - German Translation
Daniel Gerholdt <[email protected]> - German Translation
Marc Herren <[email protected]> - German Translation
Tobias Matzat <[email protected]> - German Translation
Marco Mascherpa <[email protected]> - Italian Translation
Claudio Merloni <[email protected]> - Italian Translation
Stefano Lucidi <[email protected]> - Italian Translation
Katuyuki Konno <[email protected]> - Japanese Translation
Hiroyuki Takeda <[email protected]> - Japanese Translation
Masato Hatakeyama <[email protected]> - Japanese Translation
Shigehiro Idani <[email protected]> - Japanese Translation
Masayoshi Nakamura <[email protected]> - Japanese Translation
Tomoyuki Sakurai <[email protected]> - Japanese Translation
Lukasz Strzygowski <[email protected]> - Polish Translation
Karol Goralski <[email protected]> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <[email protected]> - Portuguese 
(Brazil) Translation
Eduardo Belloti <[email protected]> - Portuguese (Brazil) Translation
João Rafael Moraes Nicola <[email protected]> - Portuguese (Brazil) 
Translation
Marcelo Gonçalves de Azambuja <[email protected]> - Portuguese 
(Brazil) Translation
Otavio Rodolfo Piske <[email protected]> - Portuguese (Brazil) 
Translation
Pablo N. Hess -- NatuNobilis <[email protected]> - Portuguese 
(Brazil) Translation
Pedro de Medeiros <[email protected]> - Portuguese (Brazil) Translation
Ventura Barbeiro <[email protected]> - Portuguese (Brazil) 
Translation
Bruno Ferreira <[email protected]> - Portuguese (Portugal) 
Translation
Gustavo Felisberto <[email protected]> - Portuguese (Portugal) 
Translation
José Costa <[email protected]> - Portuguese (Portugal) Translation
Luis Medina <[email protected]> - Portuguese (Portugal) Translation
Ricardo Loureiro <[email protected]> - Portuguese (Portugal) Translation
Aleksandr Martyncev <[email protected]> - Russian Translator
Sergey Galkin <[email protected]> - Russian Translator
Sergey Kuleshov <[email protected]> - Russian Translator
Alex Spirin <[email protected]> - Russian Translator
Denis Zaletov <[email protected]> - Russian Translator
Guillermo Juarez <[email protected]> - Spanish Translation
Fernando J. Pereda <[email protected]> - Spanish Translation
Juan Diego Gutiérrez Gallardo <[email protected]> - Spanish Translation
Nicolas Silva <[email protected]> - Spanish Translation
Aycan Irican <[email protected]> - Turkish Translation
Bugra Cakir <[email protected]> - Turkish Translation
Cagil Seker <[email protected]> - Turkish Translation
Emre Kazdagli <[email protected]> - Turkish Translation
Evrim Ulu <[email protected]> - Turkish Translation
Gursel Kaynak <[email protected]> - Turkish Translation

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBF/wCJPpRNiftIEYRAkiKAJ9eciEWr3GNxEmwCHSbh5kWb6qk2wCcCFLL
Ou3KUm/c+q/+I4+7n1lT0Co=
=SV5v
-----END PGP SIGNATURE-----