From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.50) id 1ETzer-0000ij-IJ for garchives@archives.gentoo.org; Mon, 24 Oct 2005 10:34:26 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.5/8.13.5) with SMTP id j9O9eFiJ004739; Mon, 24 Oct 2005 09:40:15 GMT Received: from smtp.gentoo.org (smtp.gentoo.org [134.68.220.30]) by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id j9O8Te35012157 for ; Mon, 24 Oct 2005 08:29:41 GMT Received: from smtp02.dentaku.gol.com ([203.216.5.72]) by smtp.gentoo.org with esmtp (Exim 4.43) id 1ETxlF-0002tr-SW for gentoo-gwn@lists.gentoo.org; Mon, 24 Oct 2005 08:32:54 +0000 Received: from 80-72-254-140.bgsk.tgnet.de ([80.72.254.140] helo=localhost) by smtp02.dentaku.gol.com with esmtpa (Dentaku) id 1ETxlE-0001Vs-FP for ; Mon, 24 Oct 2005 17:32:53 +0900 Date: Mon, 24 Oct 2005 10:32:49 +0200 From: Ulrich Plate To: gentoo-gwn@lists.gentoo.org Subject: [gentoo-gwn] Gentoo Weekly Newsletter 24 October 2005 Message-Id: <20051024103249.57fdc866.plate@gentoo.org> X-Mailer: Sylpheed version 2.1.4 (GTK+ 2.8.6; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-gwn@gentoo.org Reply-to: gwn-feedback@gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV GOL X-Abuse-Complaints: abuse@gol.com X-Archives-Salt: 30dbaf31-70ff-4918-a958-27289c8f0599 X-Archives-Hash: 24c9665e89e41b42d5e395f0c32bd526 --------------------------------------------------------------------------- Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/current.xml This is the Gentoo Weekly Newsletter for the week of 24 October 2005. --------------------------------------------------------------------------- ============== 1. Gentoo news ============== Gentoo SGI LiveCD released -------------------------- Joshua Kinard[1] released a bootable CD for Silicon Graphics machines, his fifth release candidate that builds on earlier efforts[2], and adds the SGI Origin (IP27) series to the list of supported hardware. This outstanding achievement -- other than IRIX installation media, this is the only bootable CD for SGI systems -- was largely built using Catalyst 2, the release engineering tool's next generation, and is again making use of Stanislaw Skowronek's ARCLoad bootloader and other tools. 1. kumba@gentoo.org 2. http://www.gentoo.org/news/en/gwn/20050613-newsletter.xml#doc_chap1_sect2 Carefully check the instructions in Joshua's README[3] to the CD image that can be found in the experimental MIPS section of Gentoo's mirrors[4]. In particular, CDs need to be burnt with cdrecord to make sure the IRIX-like partitioned disk structure is preserved. 3. http://dev.gentoo.org/~kumba/mips/releases/livecd-rc5/README 4. http://www.gentoo.org/main/en/mirrors.xml Gentoo Linux/MIPS 2005.1 stages for Cobalt released --------------------------------------------------- More good news for MIPS users, this one for owners of Cobalt Qubes and RaQs: Stuart Longland[5] announced that he finished building the stages for Gentoo Linux/MIPS 2005.1 installations on the popular little-endian appliances of the Cobalt Networks server series[6]. Netboot images will be made available later, the stages can already be downloaded from Stuart's devspace[7] before they hit the official Gentoo mirrors later this month. 5. redhatter@gentoo.org 6. http://dev.gentoo.org/~redhatter/mips/cobalt/about_cobalt.html 7. http://dev.gentoo.org/~redhatter/mips/cobalt/stages/ ========================= 2. Heard in the community ========================= Web forums ---------- Openoffice 2.0 is out Greeted by many Forums users, the stable version of OOo 2.0 has hit the Portage tree last week, mere hours after the official announcement. In the main thread, developer Andreas Proschofsky[8] explains the benefits of compiling the package (better KDE integration, Gentoo splashscreen) and clarifies that it will not build with Java 1.5: 8. suka@gentoo.org * OpenOffice.org 2.0.0 final released[9] 9. https://forums.gentoo.org/viewtopic-t-393445.html ====================== 3. Gentoo in the press ====================== Information Week (17 October 2005) ---------------------------------- In an article titled Open doors to innovation[10], author Larry Greenemeier of Information Week reports on small and medium-sized companies "creating IT infrastructures based on open-source software to reduce licensing fees and increase flexibility." One of the examples featuring in his concise overview of the many good uses open-source software is being put to is a company called Feedster[11], a blog aggregator service in San Francisco where 60 out of 75 servers run Gentoo to do the job of "pumping out the RSS feeds." 10. http://www.informationweek.com/story/showArticle.jhtml?articleID=172300923 11. http://feedster.com/ ================== 4. Tips and tricks ================== Rebuilding modules after a kernel upgrade ----------------------------------------- module-rebuild is a tool written by Gentoo developer John Mylchreest[12] that serves a very simple, but utterly useful purpose: Whenever you've upgraded your kernel to a newer version, this script hunts down all packages that use -- now outdated -- kernel modules and rebuilds them for you. 12. johnm@gentoo.org Suppose you've just booted into a freshly updated kernel. First of all, check which packages are using modules that haven't been built with the new sources yet: +-------------------------------------------------------------------------+ | Code Listing 4.1: | | List packages | +-------------------------------------------------------------------------+ | | |# module-rebuild list | | | +-------------------------------------------------------------------------+ So, in case you've got any wireless drivers, exotic filesystems, anything else that relies on kernel modules, chances are you've just found them listed as a result of the above, and then you can rebuild them all by simply going: +-------------------------------------------------------------------------+ | Code Listing 4.2: | | Rebuild all affected packages | +-------------------------------------------------------------------------+ | | |# module-rebuild rebuild | | | +-------------------------------------------------------------------------+ Voila. Thanks to this little routine, you don't need to keep a mental list of things to do after a kernel update any longer. Note: Thanks to Forum user Sir No for unearthing this utility. =========================== 5. Moves, adds, and changes =========================== Moves ----- The following developers recently left the Gentoo team: * None this week Adds ---- The following developers recently joined the Gentoo Linux team: * Luca Longinotti (chtekk) - Apache, webapps, PHP Changes ------- The following developers recently changed roles within the Gentoo Linux project: * None this week ================== 6. Gentoo Security ================== Perl, Qt-UnixODBC, CMake: RUNPATH issues ---------------------------------------- Multiple packages suffer from RUNPATH issues that may allow users in the "portage" group to escalate privileges. For more information, please see the GLSA Announcement[13] 13. http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml Lynx: Buffer overflow in NNTP processing ---------------------------------------- Lynx contains a buffer overflow that may be exploited to execute arbitrary code. For more information, please see the GLSA Announcement[14] 14. http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml phpMyAdmin: Local file inclusion vulnerability ---------------------------------------------- phpMyAdmin contains a local file inclusion vulnerability that may lead to the execution of arbitrary code. For more information, please see the GLSA Announcement[15] 15. http://www.gentoo.org/security/en/glsa/glsa-200510-16.xml AbiWord: New RTF import buffer overflows ---------------------------------------- AbiWord is vulnerable to an additional set of buffer overflows during RTF import, making it vulnerable to the execution of arbitrary code. For more information, please see the GLSA Announcement[16] 16. http://www.gentoo.org/security/en/glsa/glsa-200510-17.xml Netpbm: Buffer overflow in pnmtopng ----------------------------------- The pnmtopng utility, part of the Netpbm tools, contains a vulnerability which can potentially result in the execution of arbitrary code. For more information, please see the GLSA Announcement[17] 17. http://www.gentoo.org/security/en/glsa/glsa-200510-18.xml cURL: NTLM username stack overflow ---------------------------------- cURL is vulnerable to a buffer overflow which could lead to the execution of arbitrary code. For more information, please see the GLSA Announcement[18] 18. http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml =========== 7. Bugzilla =========== Summary ------- * Statistics * Closed bug ranking * New bug rankings Statistics ---------- The Gentoo community uses Bugzilla (bugs.gentoo.org[19]) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 16 October 2005 and 23 October 2005, activity on the site has resulted in: 19. http://bugs.gentoo.org * 774 new bugs during this period * 391 bugs closed or resolved during this period * 22 previously closed bugs were reopened this period Of the 8753 currently open bugs: 108 are labeled 'blocker', 186 are labeled 'critical', and 562 are labeled 'major'. Closed bug rankings ------------------- The developers and teams who have closed the most bugs during this period are: * Gentoo Sound Team[20], with 24 closed bugs[21] * Gentoo KDE team[22], with 21 closed bugs[23] * Portage team[24], with 18 closed bugs[25] * Gentoo Games[26], with 17 closed bugs[27] * Stefano Rossi[28], with 15 closed bugs[29] * Gentoo Security[30], with 11 closed bugs[31] * Jeremy Huddleston[32], with 10 closed bugs[33] * Seemant Kulleen[34], with 9 closed bugs[35] 20. sound@gentoo.org 21. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=sound@gentoo.org 22. kde@gentoo.org 23. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=kde@gentoo.org 24. dev-portage@gentoo.org 25. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=dev-portage@gentoo.org 26. games@gentoo.org 27. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=games@gentoo.org 28. so@gentoo.org 29. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=so@gentoo.org 30. security@gentoo.org 31. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=security@gentoo.org 32. eradicator@gentoo.org 33. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=eradicator@gentoo.org 34. seemant@gentoo.org 35. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=seemant@gentoo.org New bug rankings ---------------- The developers and teams who have been assigned the most new bugs during this period are: * Default Assignee for New Packages[36], with 41 new bugs[37] * AMD64 Porting Team[38], with 18 new bugs[39] * Gentoo Sound Team[40], with 16 new bugs[41] * Gentoo Linux Gnome Desktop Team[42], with 14 new bugs[43] * Gentoo Games[44], with 11 new bugs[45] * Gentoo Developer Relations Team[46], with 10 new bugs[47] * X11 External Driver Maintainers[48], with 9 new bugs[49] * Default Assignee for Orphaned Packages[50], with 9 new bugs[51] 36. maintainer-wanted@gentoo.org 37. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=maintainer-wanted@gentoo.org 38. amd64@gentoo.org 39. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=amd64@gentoo.org 40. sound@gentoo.org 41. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=sound@gentoo.org 42. gnome@gentoo.org 43. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=gnome@gentoo.org 44. games@gentoo.org 45. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=games@gentoo.org 46. devrel@gentoo.org 47. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=devrel@gentoo.org 48. x11-drivers@gentoo.org 49. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=x11-drivers@gentoo.org 50. maintainer-needed@gentoo.org 51. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=maintainer-needed@gentoo.org =============== 8. GWN feedback =============== Please send us your feedback[52] and help make the GWN better. 52. gwn-feedback@gentoo.org =============================== 9. GWN subscription information =============================== To subscribe to the Gentoo Weekly Newsletter, send a blank email to gentoo-gwn+subscribe@gentoo.org. To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to gentoo-gwn+unsubscribe@gentoo.org from the email address you are subscribed under. =================== 10. Other languages =================== The Gentoo Weekly Newsletter is also available in the following languages: * Danish[53] * Dutch[54] * English[55] * German[56] * French[57] * Japanese[58] * Italian[59] * Polish[60] * Portuguese (Brazil)[61] * Portuguese (Portugal)[62] * Russian[63] * Spanish[64] * Turkish[65] 53. http://www.gentoo.org/news/da/gwn/gwn.xml 54. http://www.gentoo.org/news/nl/gwn/gwn.xml 55. http://www.gentoo.org/news/en/gwn/gwn.xml 56. http://www.gentoo.org/news/de/gwn/gwn.xml 57. http://www.gentoo.org/news/fr/gwn/gwn.xml 58. http://www.gentoo.org/news/ja/gwn/gwn.xml 59. http://www.gentoo.org/news/it/gwn/gwn.xml 60. http://www.gentoo.org/news/pl/gwn/gwn.xml 61. http://www.gentoo.org/news/pt_br/gwn/gwn.xml 62. http://www.gentoo.org/news/pt/gwn/gwn.xml 63. http://www.gentoo.org/news/ru/gwn/gwn.xml 64. http://www.gentoo.org/news/es/gwn/gwn.xml 65. http://www.gentoo.org/news/tr/gwn/gwn.xml Ulrich Plate - Editor -- gentoo-gwn@gentoo.org mailing list