From: Ulrich Plate <plate@gentoo.org>
To: gentoo-gwn@lists.gentoo.org
Subject: [gentoo-gwn] Gentoo Weekly Newsletter 26 September 2005
Date: Mon, 26 Sep 2005 22:15:03 +0200 [thread overview]
Message-ID: <20050926221503.62e063fc.plate@gentoo.org> (raw)
---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of 26 September 2005.
---------------------------------------------------------------------------
==============
1. Gentoo news
==============
New IRC channel for ebuilders
-----------------------------
A new IRC channel, #gentoo-dev-help, is being officially announced as a
place for prospective developers, ebuild authors, bug hunters, and the
like to gather and trade tips and tricks about Gentoo's best practices.
This channel has been newly established on irc.freenode.net since many
people don't have a voice in #gentoo-dev, and to relieve the questions
that are being posed in #gentoo-portage. The creators hope to attract
Gentoo users, potential developers, and prospective arch testers who have
questions that are more in-depth than a high volume channel like #gentoo
can answer, without distracting the busy Gentoo developers from their core
activities. Any developers interested in passing on their skills are
welcome to come and join the new channel. In the interest of staying on
topic all installation questions will be referred back to #gentoo, but all
other Gentoo-related issues are fair game.
=========================
2. Heard in the community
=========================
Web forums
----------
Apache blowout
Forum regular loki99[1] had a busy Saturday trying to contain the fury of
those who got angered by the latest Apache upgrade in Gentoo Linux.
Whether you agree with its provocative title or not, the thread is
definitely worth watching as it has Gentoo developer Bryan Østergaard[2]
chiming in with a thorough explanation of what went up and why:
1. https://forums.gentoo.org/profile.php?mode=viewprofile&u=32005
2. kloeri@gentoo.org
* Gentoo Apache2 Config Change Idiocy[3]
3. https://forums.gentoo.org/viewtopic-t-384368.html
KDE 3.5 beta-ebuilds test thread
Gentoo developer Chris White[4] rounds up a group of testers for the
release of KDE 3.5, check the sticky mini-HOWTO for details on how to
participate:
4. chriswhite@gentoo.org
* Testing kde-3.5_beta1 small howto[5]
5. https://forums.gentoo.org/viewtopic-t-380632.html
gentoo-dev
----------
Marking packages stable on x86
As a consequence of GLEP40 and the new x86 arch team the policy for
stabling packages on x86 has changed. For endusers this will most likely
have no side-effects except that packages are expected to become stable in
a more timely fashion.
* Marking packages stable on x86[6]
6. http://thread.gmane.org/gmane.linux.gentoo.devel/31758
Vice and virtues of static libraries
A long thread about the pros and cons of having static libraries around,
also some packages that show "unexpected" behaviour ("if static ncurses is
unavailable, the bash ebuild will use the bundled gnutermcap (which is
bad)"). You will also find a short discussion on whether to use a new
USE-flag for it (or maybe abuse USE="minimal"?).
* Say no to static libraries! (?)[7]
7. http://thread.gmane.org/gmane.linux.gentoo.devel/31726
"Commercial" software in portage
Every now and then GLEP 23 gets resurrected - which means that some people
want to be able to disallow packagess based on the license. Especially
non-free software with restrictions on the data files would be nice to
have a warning ("You need the original Game-CD to install this!"), but as
long as portage doesn't implement GLEP 23 any changes to current behaviour
will be a bit patchy. Some ideas like overlays (split out all non-free
ebuilds) were discussed and mostly dismissed.
* Commercial software in Portage[8]
8. http://thread.gmane.org/gmane.linux.gentoo.devel/
=======================
3. Gentoo international
=======================
Germany: Gentoo developer conference call for papers
----------------------------------------------------
A reminder for all those actively considering a paper presentation at the
European conference for Gentoo developers[9] in November: please submit
your proposals before 30 September. The same form used for registering to
the event[10] can be used for submissions of topics and brief outlines of
planned presentation.
9. http://conference.gentoo.org
10. http://conference.gentoo.org/cgi-bin/registration.pl
======================
4. Gentoo in the press
======================
The Register (23 September 2005)
--------------------------------
In a letter to the editor[11], weathered sysadmin Eoin refutes the idea of
a Windows-only standard for operating systems on USB sticks that the The
Register had been reporting about earlier. "Your article regarding the new
U3 standard was mostly correct, baring your final assertion that Linux
does not support this. As far as I can tell the idea actually evolved from
the Linux heads," writes Eoin, happily acknowledging that whenever one of
those Linux heads with distros on a stick visits his offices, they
generally know what they're doing: "These people are using 2-4GB USB
drives with almost complete versions of Gentoo and Red Hat running on them
- all very impressive and thankfully I don't need to attempt (and fail) to
support them if something goes wrong."
11. http://www.theregister.co.uk/2005/09/23/letters_2309/
===========================
5. Moves, adds, and changes
===========================
Moves
-----
The following developers recently left the Gentoo team:
* None this week
Adds
----
The following developers recently joined the Gentoo Linux team:
* None this week
Changes
-------
The following developers recently changed roles within the Gentoo Linux
project:
* Daniel Gryniewicz (dang) - operational lead for AMD64 arch testers
==================
6. Gentoo Security
==================
Apache, mod_ssl: Multiple vulnerabilities
-----------------------------------------
mod_ssl and Apache are vulnerable to a restriction bypass and a potential
local privilege escalation.
For more information, please see the GLSA Announcement[12]
12. http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml
Clam AntiVirus: Multiple vulnerabilities
----------------------------------------
Clam AntiVirus is subject to vulnerabilities ranging from Denial of
Service to execution of arbitrary code when handling compressed
executables.
For more information, please see the GLSA Announcement[13]
13. http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml
Zebedee: Denial of Service vulnerability
----------------------------------------
A bug in Zebedee allows a remote attacker to perform a Denial of Service
attack.
For more information, please see the GLSA Announcement[14]
14. http://www.gentoo.org/security/en/glsa/glsa-200509-14.xml
util-linux: umount command validation error
-------------------------------------------
A command validation error in umount can lead to an escalation of
privileges.
For more information, please see the GLSA Announcement[15]
15. http://www.gentoo.org/security/en/glsa/glsa-200509-15.xml
Mantis: XSS and SQL injection vulnerabilities
---------------------------------------------
Mantis is affected by an SQL injection and several cross-site scripting
(XSS) vulnerabilities.
For more information, please see the GLSA Announcement[16]
16. http://www.gentoo.org/security/en/glsa/glsa-200509-16.xml
Webmin, Usermin: Remote code execution through PAM authentication
-----------------------------------------------------------------
If Webmin or Usermin is configured to use full PAM conversations, it is
vulnerable to the remote execution of arbitrary code with root privileges.
For more information, please see the GLSA Announcement[17]
17. http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml
===========
7. Bugzilla
===========
Summary
-------
* Statistics
* Closed bug ranking
* New bug rankings
Statistics
----------
The Gentoo community uses Bugzilla (bugs.gentoo.org[18]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 18 September 2005 and 25 September 2005,
activity on the site has resulted in:
18. http://bugs.gentoo.org
* 798 new bugs during this period
* 366 bugs closed or resolved during this period
* 39 previously closed bugs were reopened this period
Of the 8405 currently open bugs: 98 are labeled 'blocker', 189 are labeled
'critical', and 554 are labeled 'major'.
Closed bug rankings
-------------------
The developers and teams who have closed the most bugs during this period
are:
* AMD64 Porting Team[19], with 23 closed bugs[20]
* Gentoo KDE team[21], with 22 closed bugs[22]
* Gentoo Linux Gnome Desktop Team[23], with 18 closed bugs[24]
* Gentoo for Mac OS X[25], with 17 closed bugs[26]
* Gentoo Security[27], with 13 closed bugs[28]
* Gentoo Team for the ML programming language family[29], with 13 closed
bugs[30]
* PPC Porters[31], with 12 closed bugs[32]
* Gentoo net-p2p team[33], with 12 closed bugs[34]
19. amd64@gentoo.org
20.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-18&chfieldto=2005-09-25&resolution=FIXED&assigned_to=amd64@gentoo.org
21. kde@gentoo.org
22.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-18&chfieldto=2005-09-25&resolution=FIXED&assigned_to=kde@gentoo.org
23. gnome@gentoo.org
24.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-18&chfieldto=2005-09-25&resolution=FIXED&assigned_to=gnome@gentoo.org
25. ppc-macos@gentoo.org
26.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-18&chfieldto=2005-09-25&resolution=FIXED&assigned_to=ppc-macos@gentoo.org
27. security@gentoo.org
28.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-18&chfieldto=2005-09-25&resolution=FIXED&assigned_to=security@gentoo.org
29. ml@gentoo.org
30.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-18&chfieldto=2005-09-25&resolution=FIXED&assigned_to=ml@gentoo.org
31. ppc@gentoo.org
32.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-18&chfieldto=2005-09-25&resolution=FIXED&assigned_to=ppc@gentoo.org
33. net-p2p@gentoo.org
34.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-18&chfieldto=2005-09-25&resolution=FIXED&assigned_to=net-p2p@gentoo.org
New bug rankings
----------------
The developers and teams who have been assigned the most new bugs during
this period are:
* Default Assignee for New Packages[35], with 30 new bugs[36]
* Perl Devs @ Gentoo[37], with 20 new bugs[38]
* Gentoo Sound Team[39], with 9 new bugs[40]
* Gentoo KDE team[41], with 9 new bugs[42]
* Gentoo Linux Gnome Desktop Team[43], with 8 new bugs[44]
* Text-Markup Team[45], with 7 new bugs[46]
* Gentoo Games[47], with 7 new bugs[48]
* Gentoo X-windows packagers[49], with 6 new bugs[50]
35. maintainer-wanted@gentoo.org
36.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-18&chfieldto=2005-09-25&assigned_to=maintainer-wanted@gentoo.org
37. perl@gentoo.org
38.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-18&chfieldto=2005-09-25&assigned_to=perl@gentoo.org
39. sound@gentoo.org
40.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-18&chfieldto=2005-09-25&assigned_to=sound@gentoo.org
41. kde@gentoo.org
42.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-18&chfieldto=2005-09-25&assigned_to=kde@gentoo.org
43. gnome@gentoo.org
44.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-18&chfieldto=2005-09-25&assigned_to=gnome@gentoo.org
45. text-markup@gentoo.org
46.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-18&chfieldto=2005-09-25&assigned_to=text-markup@gentoo.org
47. games@gentoo.org
48.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-18&chfieldto=2005-09-25&assigned_to=games@gentoo.org
49. x11@gentoo.org
50.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-18&chfieldto=2005-09-25&assigned_to=x11@gentoo.org
===============
8. GWN feedback
===============
Please send us your feedback[51] and help make the GWN better.
51. gwn-feedback@gentoo.org
===============================
9. GWN subscription information
===============================
To subscribe to the Gentoo Weekly Newsletter, send a blank email to
gentoo-gwn+subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to
gentoo-gwn+unsubscribe@gentoo.org from the email address you are
subscribed under.
===================
10. Other languages
===================
The Gentoo Weekly Newsletter is also available in the following languages:
* Danish[52]
* Dutch[53]
* English[54]
* German[55]
* French[56]
* Japanese[57]
* Italian[58]
* Polish[59]
* Portuguese (Brazil)[60]
* Portuguese (Portugal)[61]
* Russian[62]
* Spanish[63]
* Turkish[64]
52. http://www.gentoo.org/news/da/gwn/gwn.xml
53. http://www.gentoo.org/news/nl/gwn/gwn.xml
54. http://www.gentoo.org/news/en/gwn/gwn.xml
55. http://www.gentoo.org/news/de/gwn/gwn.xml
56. http://www.gentoo.org/news/fr/gwn/gwn.xml
57. http://www.gentoo.org/news/ja/gwn/gwn.xml
58. http://www.gentoo.org/news/it/gwn/gwn.xml
59. http://www.gentoo.org/news/pl/gwn/gwn.xml
60. http://www.gentoo.org/news/pt_br/gwn/gwn.xml
61. http://www.gentoo.org/news/pt/gwn/gwn.xml
62. http://www.gentoo.org/news/ru/gwn/gwn.xml
63. http://www.gentoo.org/news/es/gwn/gwn.xml
64. http://www.gentoo.org/news/tr/gwn/gwn.xml
Ulrich Plate <plate@gentoo.org> - Editor
Patrick Lauer <patrick@gentoo.org> - Author
Tres Melton <tres@mindspring.com> - Author
--
gentoo-gwn@gentoo.org mailing list
reply other threads:[~2005-09-26 20:36 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20050926221503.62e063fc.plate@gentoo.org \
--to=plate@gentoo.org \
--cc=gentoo-gwn@lists.gentoo.org \
--cc=gwn-feedback@gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox