1 |
--------------------------------------------------------------------------- |
2 |
Gentoo Weekly Newsletter |
3 |
http://www.gentoo.org/news/en/gwn/current.xml |
4 |
This is the Gentoo Weekly Newsletter for the week of 12 September 2005. |
5 |
--------------------------------------------------------------------------- |
6 |
|
7 |
============== |
8 |
1. Gentoo news |
9 |
============== |
10 |
|
11 |
Major package updates for Apache |
12 |
-------------------------------- |
13 |
|
14 |
The Gentoo Apache Team is pleased to announce the stabilizing of package |
15 |
updates that have been in the works for over a year. Some of the major |
16 |
changes include: |
17 |
|
18 |
* New configuration and configuration locations to more closely match |
19 |
upstream and reduce confusion for users coming from other distributions. |
20 |
* Modules now use a centralized eclass that builds, installs, and |
21 |
displays standard information on enabling the module. This allows easier |
22 |
maintenance of existing modules, and allows us to more rapidly develop |
23 |
ebuilds for modules that are not yet in the tree. |
24 |
* Expanded USE flags to let you choose which MPM is compiled. |
25 |
* A new gentoo-webroot that will eventually provide a gentoo-themed |
26 |
icon-set, error documents, and default website. This has been put in it's |
27 |
own package, and includes a USE-flag to not install the gentoo-webroot |
28 |
into /var/www/localhost - useful if you put your own website there. |
29 |
* And much more, including the fixing of many many bugs. |
30 |
|
31 |
These changes will stabilized on Sunday, September 18th. These changes |
32 |
have been throughly tested and given a thumbs up by many many users. They |
33 |
also allow you to use the new php (including support for php5) ebuilds |
34 |
when they become fully available. |
35 |
|
36 |
Because of these changes and improvements, when you upgrade to the new |
37 |
revision of Apache, you will need to take care of some things. These are |
38 |
fully documented in our Upgrading Apache document [1], but in summary, |
39 |
this is what you will need to do: |
40 |
|
41 |
* Merge any customizations that you have made to the Apache configuration |
42 |
into the new configuration at /etc/apache2/httpd.conf (The configuration |
43 |
file location has changed). Note that the init script for apache checks |
44 |
for a configuration in the old location and refuses to start if you |
45 |
haven't moved/removed it - this is to avoid the possibility of moving to a |
46 |
configuration that isn't right for your machine. |
47 |
* Update any modules that you used to revisions that support the new |
48 |
eclass. Older modules will not work due to location changes. |
49 |
* Restart Apache |
50 |
We have done our best to make it easy to migrate, but if you have |
51 |
problems, feel free to visit us in #gentoo-apache on irc.freenode.net or |
52 |
on our mailing list gentoo-web-user@g.o and we'll be glad to help. |
53 |
|
54 |
========================= |
55 |
2. Heard in the community |
56 |
========================= |
57 |
|
58 |
gentoo-dev |
59 |
---------- |
60 |
|
61 |
USE="minimal" for kernel sources |
62 |
|
63 |
The kernel sources are rather large, but carry "unneeded" things like |
64 |
assembler sources for all arches you don't have. So why not strip down the |
65 |
kernel sources to be as small as possible, saving important diskspace in |
66 |
the process? This thread discusses why Gentoo won't offer such a kernel |
67 |
and why it's in general a bad idea to strip down the kernel sources. |
68 |
|
69 |
* USE="minimal" for kernel sources [1] |
70 |
1. http://thread.gmane.org/gmane.linux.gentoo.devel/31146 |
71 |
|
72 |
[Summary] tentative x86 arch team glep |
73 |
|
74 |
Chris White[2] has done it again and offers a summary of one of those |
75 |
horrifically long threads that make reading the -dev mailinglist so |
76 |
time-consuming. Thanks Chris! |
77 |
2. chriswhite@g.o |
78 |
|
79 |
* [Summary] tentative x86 arch team glep[3] |
80 |
3. http://thread.gmane.org/gmane.linux.gentoo.devel/31169 |
81 |
|
82 |
====================== |
83 |
3. Gentoo in the press |
84 |
====================== |
85 |
|
86 |
ComputerWorld (9 September 2005) |
87 |
-------------------------------- |
88 |
|
89 |
"One of the open-source movement's most visible boosters" Eric S. |
90 |
Raymond[4] seems to have had a narrow escape from being lured into the |
91 |
same sort of position that Gentoo founder Daniel Robbins now occupies with |
92 |
Microsoft, writes Robert McMillan in a ComputerWorld article[5]. Given the |
93 |
fact that the publisher of the Halloween documents might feel more than |
94 |
just a little out of place at the company he's been fighting quite eagerly |
95 |
for years, it may have been oversight on behalf of a recruiter who just |
96 |
didn't know exactly who he was trying to hire... |
97 |
4. http://www.catb.org/~esr/ |
98 |
5. |
99 |
http://www.computerworld.com/softwaretopics/software/story/0,10801,104530,0 |
100 |
0.html |
101 |
|
102 |
REBOL website (9 September 2005) |
103 |
-------------------------------- |
104 |
|
105 |
Carl Sassenroth, head of REBOL Technologies, has extended the reach of his |
106 |
programming language/operating environment to a new platform, as he |
107 |
explains in a short notice about REBOL for Linux on PPC[6], tested on the |
108 |
PegasosPPC[7] in both Gentoo and Debian Linux, and ready for download to |
109 |
whoever would like to try it out. |
110 |
6. http://www.rebol.net/article/0204.html |
111 |
7. http://vendors.gentoo.org/index.cgi?page=1&comGroup=1 |
112 |
|
113 |
================== |
114 |
4. Tips and tricks |
115 |
================== |
116 |
|
117 |
Tweaking kernel options yet some more |
118 |
------------------------------------- |
119 |
|
120 |
Remember our rather concise tip about the search function[8] in the |
121 |
kernel's make menuconfig last week? A related tip is particularly helpful |
122 |
whenever you're trying to do something like eradicate an unknown |
123 |
dependency. For example, let's say that you want to change your kernel |
124 |
configuration from modular to monolithic. But when you try to make that |
125 |
change, it is blocked because there are still features marked "M" |
126 |
somewhere. |
127 |
8. http://www.gentoo.org/news/en/gwn/20050905-newsletter.xml#doc_chap6 |
128 |
|
129 |
An easy way to hunt these hidden dependencies down is to "Save |
130 |
Configuration to an Alternate File" first, picking something like |
131 |
.config.now (i.e. just type ".now" enter). Next, jump to another console |
132 |
and look at the file: |
133 |
|
134 |
+-------------------------------------------------------------------------+ |
135 |
| Code Listing 4.1: | |
136 |
| Read the config file | |
137 |
+-------------------------------------------------------------------------+ |
138 |
| | |
139 |
|less /usr/src/kernel/.config.now | |
140 |
| | |
141 |
+-------------------------------------------------------------------------+ |
142 |
|
143 |
Now have a look at the real product of menuconfig. Just search: |
144 |
|
145 |
+-------------------------------------------------------------------------+ |
146 |
| Code Listing 4.2: | |
147 |
| Search for modular options | |
148 |
+-------------------------------------------------------------------------+ |
149 |
| | |
150 |
|/=m | |
151 |
| | |
152 |
+-------------------------------------------------------------------------+ |
153 |
|
154 |
Once you've found where the offending area is, you can go back to make |
155 |
menuconfig and use last week's tip to search for its location in the |
156 |
hierarchy (if it's still not clear). |
157 |
|
158 |
This tip is especially handy when trying to create a minimal system and |
159 |
you find that the kernel has been packed full of support for obsolete |
160 |
hardware that escaped your first review. By searching through the .config |
161 |
file while using menuconfig, you can really expand on its capabilities. |
162 |
|
163 |
=========================== |
164 |
5. Moves, adds, and changes |
165 |
=========================== |
166 |
|
167 |
Moves |
168 |
----- |
169 |
|
170 |
The following developers recently left the Gentoo team: |
171 |
|
172 |
* None this week |
173 |
|
174 |
Adds |
175 |
---- |
176 |
|
177 |
The following developers recently joined the Gentoo Linux team: |
178 |
|
179 |
* Matti Bickel (mabi) - Arch tester for PPC |
180 |
* Christian Hartmann (ian) - Official staff (Global forums moderator) |
181 |
* Mauricio Lima Pilla (pilla) - Official staff (Global forums moderator) |
182 |
|
183 |
Changes |
184 |
------- |
185 |
|
186 |
The following developers recently changed roles within the Gentoo Linux |
187 |
project: |
188 |
|
189 |
* None this week |
190 |
|
191 |
================== |
192 |
6. Gentoo Security |
193 |
================== |
194 |
|
195 |
OpenTTD: Format string vulnerabilities |
196 |
-------------------------------------- |
197 |
|
198 |
OpenTTD is vulnerable to format string vulnerabilities which may result in |
199 |
remote execution of arbitrary code. |
200 |
|
201 |
For more information, please see the GLSA Announcement[9] |
202 |
9. http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml |
203 |
|
204 |
phpLDAPadmin: Authentication bypass |
205 |
----------------------------------- |
206 |
|
207 |
A flaw in phpLDAPadmin may allow attackers to bypass security restrictions |
208 |
and connect anonymously. |
209 |
|
210 |
For more information, please see the GLSA Announcement[10] |
211 |
10. http://www.gentoo.org/security/en/glsa/glsa-200509-04.xml |
212 |
|
213 |
Net-SNMP: Insecure RPATH |
214 |
------------------------ |
215 |
|
216 |
The Gentoo Net-SNMP package may provide Perl modules containing an |
217 |
insecure DT_RPATH, potentially allowing privilege escalation. |
218 |
|
219 |
For more information, please see the GLSA Announcement[11] |
220 |
11. http://www.gentoo.org/security/en/glsa/glsa-200509-05.xml |
221 |
|
222 |
Squid: Denial of Service vulnerabilities |
223 |
---------------------------------------- |
224 |
|
225 |
Squid contains several bugs when handling certain malformed requests |
226 |
resulting in a Denial of Service. |
227 |
|
228 |
For more information, please see the GLSA Announcement[12] |
229 |
12. http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml |
230 |
|
231 |
=========== |
232 |
7. Bugzilla |
233 |
=========== |
234 |
|
235 |
Summary |
236 |
------- |
237 |
|
238 |
* Statistics |
239 |
* Closed bug ranking |
240 |
* New bug rankings |
241 |
|
242 |
Statistics |
243 |
---------- |
244 |
|
245 |
The Gentoo community uses Bugzilla (bugs.gentoo.org[13]) to record and |
246 |
track bugs, notifications, suggestions and other interactions with the |
247 |
development team. Between 04 September 2005 and 11 September 2005, |
248 |
activity on the site has resulted in: |
249 |
13. http://bugs.gentoo.org |
250 |
|
251 |
* 794 new bugs during this period |
252 |
* 386 bugs closed or resolved during this period |
253 |
* 29 previously closed bugs were reopened this period |
254 |
|
255 |
Of the 8269 currently open bugs: 97 are labeled 'blocker', 198 are labeled |
256 |
'critical', and 543 are labeled 'major'. |
257 |
|
258 |
Closed bug rankings |
259 |
------------------- |
260 |
|
261 |
The developers and teams who have closed the most bugs during this period |
262 |
are: |
263 |
|
264 |
* AMD64 Porting Team[14], with 47 closed bugs[15] |
265 |
* Java team[16], with 23 closed bugs[17] |
266 |
* Gentoo Linux Gnome Desktop Team[18], with 18 closed bugs[19] |
267 |
* Gentoo Games[20], with 14 closed bugs[21] |
268 |
* Shyam Mani[22], with 11 closed bugs[23] |
269 |
* Gentoo X-windows packagers[24], with 10 closed bugs[25] |
270 |
* ppc64 architecture team[26], with 10 closed bugs[27] |
271 |
* PHP Bugs[28], with 10 closed bugs[29] |
272 |
14. amd64@g.o |
273 |
15. |
274 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=amd64@g.o |
275 |
16. java@g.o |
276 |
17. |
277 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=java@g.o |
278 |
18. gnome@g.o |
279 |
19. |
280 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=gnome@g.o |
281 |
20. games@g.o |
282 |
21. |
283 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=games@g.o |
284 |
22. fox2mike@g.o |
285 |
23. |
286 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=fox2mike@g.o |
287 |
24. x11@g.o |
288 |
25. |
289 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=x11@g.o |
290 |
26. ppc64@g.o |
291 |
27. |
292 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=ppc64@g.o |
293 |
28. php-bugs@g.o |
294 |
29. |
295 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=php-bugs@g.o |
296 |
|
297 |
New bug rankings |
298 |
---------------- |
299 |
|
300 |
The developers and teams who have been assigned the most new bugs during |
301 |
this period are: |
302 |
|
303 |
* Elfyn McBratney[30], with 56 new bugs[31] |
304 |
* Default Assignee for New Packages[32], with 44 new bugs[33] |
305 |
* Perl Ebuild Requests[34], with 24 new bugs[35] |
306 |
* Gentoo Sound Team[36], with 9 new bugs[37] |
307 |
* Qmail Team[38], with 8 new bugs[39] |
308 |
* Default Assignee for Orphaned Packages[40], with 8 new bugs[41] |
309 |
* AMD64 Porting Team[42], with 7 new bugs[43] |
310 |
* Gentoo Toolchain Maintainers[44], with 6 new bugs[45] |
311 |
30. beu@g.o |
312 |
31. |
313 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=beu@g.o |
314 |
32. maintainer-wanted@g.o |
315 |
33. |
316 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=maintainer-wanted@g.o |
317 |
34. perl-request@g.o |
318 |
35. |
319 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=perl-request@g.o |
320 |
36. sound@g.o |
321 |
37. |
322 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=sound@g.o |
323 |
38. qmail-bugs@g.o |
324 |
39. |
325 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=qmail-bugs@g.o |
326 |
40. maintainer-needed@g.o |
327 |
41. |
328 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=maintainer-needed@g.o |
329 |
42. amd64@g.o |
330 |
43. |
331 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=amd64@g.o |
332 |
44. toolchain@g.o |
333 |
45. |
334 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=toolchain@g.o |
335 |
|
336 |
=============== |
337 |
8. GWN feedback |
338 |
=============== |
339 |
|
340 |
Please send us your feedback[46] and help make the GWN better. |
341 |
46. gwn-feedback@g.o |
342 |
|
343 |
=============================== |
344 |
9. GWN subscription information |
345 |
=============================== |
346 |
|
347 |
To subscribe to the Gentoo Weekly Newsletter, send a blank email to |
348 |
gentoo-gwn+subscribe@g.o. |
349 |
|
350 |
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to |
351 |
gentoo-gwn+unsubscribe@g.o from the email address you are |
352 |
subscribed under. |
353 |
|
354 |
=================== |
355 |
10. Other languages |
356 |
=================== |
357 |
|
358 |
The Gentoo Weekly Newsletter is also available in the following languages: |
359 |
|
360 |
* Danish[47] |
361 |
* Dutch[48] |
362 |
* English[49] |
363 |
* German[50] |
364 |
* French[51] |
365 |
* Japanese[52] |
366 |
* Italian[53] |
367 |
* Polish[54] |
368 |
* Portuguese (Brazil)[55] |
369 |
* Portuguese (Portugal)[56] |
370 |
* Russian[57] |
371 |
* Spanish[58] |
372 |
* Turkish[59] |
373 |
47. http://www.gentoo.org/news/da/gwn/gwn.xml |
374 |
48. http://www.gentoo.org/news/nl/gwn/gwn.xml |
375 |
49. http://www.gentoo.org/news/en/gwn/gwn.xml |
376 |
50. http://www.gentoo.org/news/de/gwn/gwn.xml |
377 |
51. http://www.gentoo.org/news/fr/gwn/gwn.xml |
378 |
52. http://www.gentoo.org/news/ja/gwn/gwn.xml |
379 |
53. http://www.gentoo.org/news/it/gwn/gwn.xml |
380 |
54. http://www.gentoo.org/news/pl/gwn/gwn.xml |
381 |
55. http://www.gentoo.org/news/pt_br/gwn/gwn.xml |
382 |
56. http://www.gentoo.org/news/pt/gwn/gwn.xml |
383 |
57. http://www.gentoo.org/news/ru/gwn/gwn.xml |
384 |
58. http://www.gentoo.org/news/es/gwn/gwn.xml |
385 |
59. http://www.gentoo.org/news/tr/gwn/gwn.xml |
386 |
|
387 |
Ulrich Plate <plate@g.o> - Editor |
388 |
Chris X Edwards <chris@×××.ch> - Author |
389 |
Patrick Lauer <patrick@g.o> - Author |
390 |
Michael Stewart <vericgar@g.o> - Author |
391 |
|
392 |
-- |
393 |
gentoo-gwn@g.o mailing list |