[gentoo-gwn] Gentoo Weekly Newsletter 11 July 2005

[gentoo-gwn] Gentoo Weekly Newsletter 11 July 2005

[Ulrich Plate]

---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of 11 July 2005.
---------------------------------------------------------------------------
 
==============
1. Gentoo News
==============
  
2.5 million posts
-----------------
  
With the ascension of Gentoo Forum moderators to official staff membership 
progressing nicely, their area of activity has just passed yet another 
impressive milestone: On 6 July, the magic number of 2.5 million posts was 
reached. Since finding out who the poster of this historic submission was 
is fiendishly difficult and involves major operations on the underlying 
database, suffice for now to show visual proof of the moment: 
 
Figure 1.1: Passing the 2.5 million mark: Total number of Forum posts on 6 
July 2005
http://www.gentoo.org/images/gwn/20050711_postcount.png
    
Documentation project update
----------------------------
  
Recent addition to the Documentation team Shyam Mani[1] has rewritten the 
heavily outdated ALSA Guide, and converted Daniel Robbins' articles from 
IBM DeveloperWorks to the standard GuideXML format and made them available 
at the Gentoo website[2]. A completely new piece of documentation is 
Benedikt Boehm's[3] contributed vserver Howto[4], while major revamping 
has been applied to the Gentoo Handbook[5] (now with an improved 
description of lspci and an update on devfsd versus udev. A new part on 
network configuration that covers Gentoo's current baselayout and includes 
wireless networks has been added to the handbook, and the NVidia, Gentoo 
Security and Printing Guides have also been updated. The complete status 
update can be viewed at the Gentoo website[6]. 

 1. fox2mike@gentoo.org
 2. http://www.gentoo.org/doc/en/articles/
 3. hollow@gentoo.org
 4. http://www.gentoo.org/doc/en/vserver-howto.xml
 5. http://www.gentoo.org/doc/en/handbook/
 6. http://www.gentoo.org/proj/en/gdp/status/status_20050630.xml
    
Greek translator team looking for new members
---------------------------------------------
  
The Greek translators of the Gentoo documentation are recruiting new team 
members to reinforce their ability to cover the material in its entirety. 
If your Greek is up to the task and you would like to join the other 
translators, contact Ioannis Aslanidis[7], please. 

 7. deathwing_commander@hotmail.com
    
========================
2. Developer of the week
========================
  
"It's done when it's done" -- Tobias Scherbaum (dertobi123)
-----------------------------------------------------------
  
Figure 2.1: Tobias Scherbaum aka dertobi123
http://www.gentoo.org/images/gwn/20050711_dertobi123.jpg
 
This week's featured dev is Tobias Scherbaum, better known to most as 
dertobi123[8]. He lives in Oberhausen in Germany's industrial Ruhr region, 
and is one of the veterans among German developers. As with many other 
Gentoo developers he associated himself with Gentoo well before he could 
get involved with any other OSS project. 

 8. dertobi123@gentoo.org
 
Tobias is the German lead translator, but recently started HPPA stage 
building and PPC stable keywording, too. Probably his best-known project, 
one he has spent a lot of time on, are the FizzleWizzle XLiveCDs that see 
new releases shipping just in time for most of Europe's major Linux 
events, like FOSDEM, LinuxTag or the German edition of the Linux World 
Expo. At the moment he is undergoing an apprenticeship for 
"Fachinformatiker Systemintegration", which essentially boils down to 
becoming a highly trained monkey for fixing cabling and computer problems. 
Before that he passed his German "Abitur" (graduation after 12 or 13 years 
of school) and studied Economy for two years. 
 
Like many Gentooists he owns an impressive hardware collection, spanning 
many architectures, including SGI, SUN and HPPA, plus an iBook and some 
obsolete x86 machines. Some platforms are still missing, but one of 
Tobias' ambitions in life is to decorate his home with at least one 
specimen of every single architecture that Gentoo runs on. 
 
His normal working environment is the Gnome, with ssh and screen as the 
main helpers for administration and remote connections. About the first 
application he fires up in the morning is usually Evolution, followed by a 
sufficiently large amount of terminals to accomodate all his screen 
sessions. Contrary to popular opinion he has a life outside the computers, 
with more exotic hobbies such as gardening (with barbecues as an important 
subset), reading computerbooks and cycling, but he is currently void of a 
female companion. 
 
Tobias is one of the founders of the "Friends of Gentoo e.V.", the German 
NFP association, and a regular booth staff member at German Linux 
happenings. Just a few weeks ago he passed the ebuild quiz and is now a 
fully enabled ot wreak havoc in the Portage tree, and he maintains the 
GTK+-2 frontend for CD/DVD burning, graveman. Tobias has so far completely 
and utterly failed to break the tree as such, but on the upside of things 
he's managed to get a number of overdue packages to stable status, most 
importantly Gnome 2.10 for PPC. 
    
=========================
3. Heard in the community
=========================
  
gentoo-dev
----------
  
Keywording problems
 
Just a few minutes apart two threads were started in response to some 
violations of our keywording policy. As it seems some devs were a bit 
optimistic and broke a few things on SPARC. This shouldn't happen, but 
somehow it does every now and then. To quote Monty Python: "We apologise 
for that. The people responsible have been sacked" 
 
 * Keys and words: ways to fail your team [9] 
 * Brainless keywording [10] 
 9. http://thread.gmane.org/gmane.linux.gentoo.devel/29230
 10. http://thread.gmane.org/gmane.linux.gentoo.devel/29220

 
GLEP 38: Status of forum moderators
 
For the longest time the forum moderators that are not already developers 
were not considered official staff while the forums were official. To 
rectify this situation GLEP 38 was proposed in which the global moderators 
would become official Gentoo staff by taking the staff quiz. Due to some 
suboptimal wording this was slightly misunderstood and caused a minor 
flamewar, but in the end an agreement was reached. 
 
 * Glep 38: Status of forum moderators in The Gentoo project [11] 
 * Glep 38: round two [12] 
 11. http://thread.gmane.org/gmane.linux.gentoo.devel/29139
 12. http://thread.gmane.org/gmane.linux.gentoo.devel/29219

    
=======================
4. Gentoo International
=======================
  
Argentina: Ututo-E 2005.1 release
---------------------------------
  
The Ututo-e[13] Core Team announces the release of its Gentoo-based 
GNU/Linux Distribution, Ututo XS 2005.1. Ututo-e is a Gentoo-based 
distribution for desktop users that keeps compatibility with Gentoo and 
enjoys endorsement by the FSF and Richard M. Stallman himself as the "only 
free GNU/Linux distribution"[14] he knows. 

 13. http://e.ututo.org.ar
 14. http://kerneltrap.org/node/4484
 
The new release XS 2005.1 is aiming for ease of migration from proprietary 
operating systems. Ututo-e provides a per-processor globally-optimized 
software packages repository, processor-optimized downloadable ISO images 
for installation, and a soon-to-be released LiveCD. Additionally, Ututo-e 
is supporting the x86_64 architecture. You can download the different 
flavors of Ututo-e's XS 2005.1 directly from the GNU Project's 
servers[15], or from any of the nine mirrors[16] available worldwide, or 
via BitTorrent[17]. The Ututo-e XS 2005.1 installation system is available 
in English, Italian, Portuguese and Spanish, and comes with a GUI- or 
console-based (ncurses) administration system. 

 15. http://ftp.gnu.org/pub/gnu+linux-distros/ututo-e/
 16. https://e.ututo.org.ar/xp/modules/mydownloads/
 17. http://www.linuxtracker.org/
 
Ututo-e's core team would like to join an expression of their gratitude to 
this announcement: a huge thank you goes to every and each person that has 
contributed to the Gentoo Project. People, base your projects on Gentoo. 
It's a wonderful metadistribution. Again, thank you. 
    
Japan: Visiting European devs get shown around
----------------------------------------------
  
UK-based Gentoo dev Marcus D. Hanwell[18], returning from a conference in Sapporo, 
stayed in Tokyo for a week. Enough excuse for Tomoyuki Sakurai, the GWN 
lead translator, to organise a night out and about for cryos and his 
English friends: They went to Tokyo's traditional and popular downtown 
area of Asakusa, enjoyed the basic pleasures of Japanese food including 
Okonomiyaki and Monjayaki[19], then went on to a genuine spa, one of the 
few hotsprings right in the heart of Tokyo. The long day was rounded off 
at a typical Izakaya, a Japanese style pub offering yet some more snacks, 
and the four Englishmen who hadn't heard of anything but Sushi and Sashimi 
went home quite pleasantly surprised at the wide range of foods in Japan. 

 18. cryos@gentoo.org
 19. http://en.wikipedia.org/wiki/Okonomiyaki
 
Figure 4.1: Cryos (right) and friends at Ueno train station
http://www.gentoo.org/images/gwn/20050711_cryos.jpg
 
Just a few days later, on 7 July, the GentooJP lot held a party in honor 
of yet another visiting Gentoo dev, Luca Barbato[20] and his Italian 
friends. A Japanese family of Gentooists, Japan-based Jason Stubbs[21] and 
Mudrii joined the crowd, adding the benefit of both being 
weathered foreigners living in Japan: very helpful resources, particularly 
as guides to undocumented rules in Japanese society for Italian 
travellers. The type of information Luca and his companions got is 
impossible to be had from books, and available to other Gentooists if they 
happen to make it all the way to Japan. Next time you do, remember to drop 
a line to the gentoojp-misc@ml.gentoo.gr.jp mailing list, or /join the 
#gentoo-ja IRC channel on Freenode. 

 20. lu_zero@gentoo.org
 21. jstubbs@gentoo.org
 
Figure 4.2: Mudrii, jstubss and lu_zero at a pub in Tokyo
http://www.gentoo.org/images/gwn/20050711_luzero.jpg
    
======================
5. Gentoo in the press
======================
  
Linux Weekly News (28 June 2005)
--------------------------------
  
Gentoo dev and regular GWN contributor Patrick Lauer's article[22] about 
the Gentoo community was published two weeks ago, but has only now been 
made available to non-subscribers of the Linux Weekly News. He provides an 
overview of the community, with fellow Gentoo devs Donnie Berkholz[23] and 
Grant Goodyear[24] chiming in for the ensuing discussion. 

 22. http://lwn.net/Articles/141886/
 23. spyderous@gentoo.org
 24. g2boojum@gentoo.org
    
===========================
6. Moves, adds, and changes
===========================
  
Moves
-----
  
The following developers recently left the Gentoo team: 
 
 * None this week 
    
Adds
----
  
The following developers recently joined the Gentoo Linux team: 
 
 * Brent Baude (ranger) - PPC/PPC64 
 * Jan Hendrik Grahl (grahl04) - Documentation translator 
 * Joshua Baergen (Josh_B) - X11 
 * Kahtryn Kulick - commonbox, net-im, X11 themes 
 * Michael Curtis Napier (curtis119) - WWW redesign 
 * Scott Shawcroft (tannewt) - Bugday team 
    
Changes
-------
  
The following developers recently changed roles within the Gentoo Linux 
project:
 
 * Tobias Scherbaum (dertobi123) - Adds HPPA release engineering to his 
other duties 
    
==================
7. Gentoo security
==================
  
Clam AntiVirus: Denial of Service vulnerability
-----------------------------------------------
  
Clam AntiVirus is vulnerable to a Denial of Service attack when processing 
certain Quantum archives. 
 
For more information, please see the GLSA Announcement[25] 

 25. http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml
    
Heimdal: Buffer overflow vulnerabilities
----------------------------------------
  
Multiple buffer overflow vulnerabilities in Heimdal's telnetd server could 
allow the execution of arbitrary code. 
 
For more information, please see the GLSA Announcement[26] 

 26. http://www.gentoo.org/security/en/glsa/glsa-200506-24.xml
    
PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability
-----------------------------------------------------------
  
The PEAR XML-RPC and phpxmlrpc libraries allow remote attackers to execute 
arbitrary PHP script commands. 
 
For more information, please see the GLSA Announcement[27] 

 27. http://www.gentoo.org/security/en/glsa/glsa-200507-01.xml
    
WordPress: Multiple vulnerabilities
-----------------------------------
  
WordPress contains PHP script injection, cross-site scripting and path 
disclosure vulnerabilities. 
 
For more information, please see the GLSA Announcement[28] 

 28. http://www.gentoo.org/security/en/glsa/glsa-200507-02.xml
    
phpBB: Arbitrary command execution
----------------------------------
  
A vulnerability in phpBB allows a remote attacker to execute arbitrary 
commands with the rights of the web server. 
 
For more information, please see the GLSA Announcement[29] 

 29. http://www.gentoo.org/security/en/glsa/glsa-200507-03.xml
    
RealPlayer: Heap overflow vulnerability
---------------------------------------
  
RealPlayer is vulnerable to a heap overflow that could lead to remote 
execution of arbitrary code. 
 
For more information, please see the GLSA Announcement[30] 

 30. http://www.gentoo.org/security/en/glsa/glsa-200507-04.xml
    
zlib: Buffer overflow
---------------------
  
A buffer overflow has been discovered in zlib, potentially resulting in 
the execution of arbitrary code. 
 
For more information, please see the GLSA Announcement[31] 

 31. http://www.gentoo.org/security/en/glsa/glsa-200507-05.xml
    
TikiWiki: Arbitrary command execution through XML-RPC
-----------------------------------------------------
  
TikiWiki includes PHP XML-RPC code, making it vulnerable to arbitrary 
command execution. 
 
For more information, please see the GLSA Announcement[32] 

 32. http://www.gentoo.org/security/en/glsa/glsa-200507-06.xml
    
phpWebSite: Multiple vulnerabilities
------------------------------------
  
phpWebSite is vulnerable to the remote execution of arbitrary PHP script 
code and to other, yet undisclosed, vulnerabilities. 
 
For more information, please see the GLSA Announcement[33] 

 33. http://www.gentoo.org/security/en/glsa/glsa-200507-07.xml
    
phpGroupWare, eGroupWare: PHP script injection vulnerability
------------------------------------------------------------
  
phpGroupWare and eGroupWare include an XML-RPC implementation which allows 
remote attackers to execute arbitrary PHP script commands. 
 
For more information, please see the GLSA Announcement[34] 

 34. http://www.gentoo.org/security/en/glsa/glsa-200507-08.xml
    
===========
8. Bugzilla
===========
  
Summary
-------
  
 * Statistics 
 * Closed bug ranking 
 * New bug rankings 
    
Statistics
----------
  
The Gentoo community uses Bugzilla (bugs.gentoo.org[35]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 26 June 2005 and 10 July 2005, activity on the 
site has resulted in: 

 35. http://bugs.gentoo.org
 
 * 1437 new bugs during this period 
 * 840 bugs closed or resolved during this period 
 * 35 previously closed bugs were reopened this period 
 
Of the 8392 currently open bugs: 103 are labeled 'blocker', 200 are 
labeled 'critical', and 597 are labeled 'major'. 
    
Closed bug rankings
-------------------
  
The developers and teams who have closed the most bugs during this period 
are: 
 
 * AMD64 Porting Team[36], with 44 closed bugs[37]  
 * Gentoo KDE team[38], with 41 closed bugs[39]  
 * Gentoo Web Application Packages Maintainers[40], with 36 closed 
bugs[41]  
 * Gentoo Linux Gnome Desktop Team[42], with 33 closed bugs[43]  
 * Jonathan Smith[44], with 31 closed bugs[45]  
 * Xavier Neys[46], with 30 closed bugs[47]  
 * Gentoo's Team for Core System packages[48], with 29 closed bugs[49]  
 * Java team[50], with 28 closed bugs[51]  
 36. amd64@gentoo.org
 37. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-06-26&chfieldto=2005-07-10&resolution=FIXED&assigned_to=amd64@gentoo.org
 38. kde@gentoo.org
 39. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-06-26&chfieldto=2005-07-10&resolution=FIXED&assigned_to=kde@gentoo.org
 40. web-apps@gentoo.org
 41. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-06-26&chfieldto=2005-07-10&resolution=FIXED&assigned_to=web-apps@gentoo.org
 42. gnome@gentoo.org
 43. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-06-26&chfieldto=2005-07-10&resolution=FIXED&assigned_to=gnome@gentoo.org
 44. smithj@gentoo.org
 45. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-06-26&chfieldto=2005-07-10&resolution=FIXED&assigned_to=smithj@gentoo.org
 46. neysx@gentoo.org
 47. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-06-26&chfieldto=2005-07-10&resolution=FIXED&assigned_to=neysx@gentoo.org
 48. base-system@gentoo.org
 49. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-06-26&chfieldto=2005-07-10&resolution=FIXED&assigned_to=base-system@gentoo.org
 50. java@gentoo.org
 51. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-06-26&chfieldto=2005-07-10&resolution=FIXED&assigned_to=java@gentoo.org

    
New bug rankings
----------------
  
The developers and teams who have been assigned the most new bugs during 
this period are: 
 
 * Default Assignee for New Packages[52], with 103 new bugs[53]  
 * Default Assignee for Orphaned Packages[54], with 59 new bugs[55]  
 * AMD64 Porting Team[56], with 25 new bugs[57]  
 * Gentoo Sound Team[58], with 21 new bugs[59]  
 * Stuart Herbert[60], with 20 new bugs[61]  
 * Gentoo KDE team[62], with 17 new bugs[63]  
 * Java team[64], with 17 new bugs[65]  
 * media-video herd[66], with 15 new bugs[67]  
 52. maintainer-wanted@gentoo.org
 53. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-06-26&chfieldto=2005-07-10&assigned_to=maintainer-wanted@gentoo.org
 54. maintainer-needed@gentoo.org
 55. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-06-26&chfieldto=2005-07-10&assigned_to=maintainer-needed@gentoo.org
 56. amd64@gentoo.org
 57. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-06-26&chfieldto=2005-07-10&assigned_to=amd64@gentoo.org
 58. sound@gentoo.org
 59. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-06-26&chfieldto=2005-07-10&assigned_to=sound@gentoo.org
 60. stuart@gentoo.org
 61. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-06-26&chfieldto=2005-07-10&assigned_to=stuart@gentoo.org
 62. kde@gentoo.org
 63. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-06-26&chfieldto=2005-07-10&assigned_to=kde@gentoo.org
 64. java@gentoo.org
 65. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-06-26&chfieldto=2005-07-10&assigned_to=java@gentoo.org
 66. media-video@gentoo.org
 67. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-06-26&chfieldto=2005-07-10&assigned_to=media-video@gentoo.org

    
===============
9. GWN feedback
===============
   
Please send us your feedback[68] and help make the GWN better. 

 68. gwn-feedback@gentoo.org
    
================================
10. GWN subscription information
================================
   
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn+subscribe@gentoo.org. 
 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn+unsubscribe@gentoo.org from the email address you are 
subscribed under. 
    
===================
11. Other languages
===================
   
The Gentoo Weekly Newsletter is also available in the following languages:
 
 * Danish[69]  
 * Dutch[70]  
 * English[71]  
 * German[72]  
 * French[73]  
 * Japanese[74]  
 * Italian[75]  
 * Polish[76]  
 * Portuguese (Brazil)[77]  
 * Portuguese (Portugal)[78]  
 * Russian[79]  
 * Spanish[80]  
 * Turkish[81]  
 69. http://www.gentoo.org/news/da/gwn/gwn.xml
 70. http://www.gentoo.org/news/nl/gwn/gwn.xml
 71. http://www.gentoo.org/news/en/gwn/gwn.xml
 72. http://www.gentoo.org/news/de/gwn/gwn.xml
 73. http://www.gentoo.org/news/fr/gwn/gwn.xml
 74. http://www.gentoo.org/news/ja/gwn/gwn.xml
 75. http://www.gentoo.org/news/it/gwn/gwn.xml
 76. http://www.gentoo.org/news/pl/gwn/gwn.xml
 77. http://www.gentoo.org/news/pt_br/gwn/gwn.xml
 78. http://www.gentoo.org/news/pt/gwn/gwn.xml
 79. http://www.gentoo.org/news/ru/gwn/gwn.xml
 80. http://www.gentoo.org/news/es/gwn/gwn.xml
 81. http://www.gentoo.org/news/tr/gwn/gwn.xml

   
Ulrich Plate <plate@gentoo.org> - Editor
Arturo 'Buanzo' Busleiman <buanzo@buanzo.com.ar> - Author
Wernfried Haas <w.haas@xover.htu.tuwien.ac.at> - Author
Patrick Lauer <patrick@gentoo.org> - Author

-- 
gentoo-gwn@gentoo.org mailing list