Gentoo Archives: gentoo-gwn

From: Ulrich Plate <plate@g.o>
To: gentoo-gwn@l.g.o
Subject: [gentoo-gwn] Gentoo Weekly Newsletter 12 September 2005
Date: Mon, 12 Sep 2005 00:28:39
Message-Id: 20050912020044.655e7f46.plate@gentoo.org
1 ---------------------------------------------------------------------------
2 Gentoo Weekly Newsletter
3 http://www.gentoo.org/news/en/gwn/current.xml
4 This is the Gentoo Weekly Newsletter for the week of 12 September 2005.
5 ---------------------------------------------------------------------------
6
7 ==============
8 1. Gentoo news
9 ==============
10
11 Major package updates for Apache
12 --------------------------------
13
14 The Gentoo Apache Team is pleased to announce the stabilizing of package
15 updates that have been in the works for over a year. Some of the major
16 changes include:
17
18 * New configuration and configuration locations to more closely match
19 upstream and reduce confusion for users coming from other distributions.
20 * Modules now use a centralized eclass that builds, installs, and
21 displays standard information on enabling the module. This allows easier
22 maintenance of existing modules, and allows us to more rapidly develop
23 ebuilds for modules that are not yet in the tree.
24 * Expanded USE flags to let you choose which MPM is compiled.
25 * A new gentoo-webroot that will eventually provide a gentoo-themed
26 icon-set, error documents, and default website. This has been put in it's
27 own package, and includes a USE-flag to not install the gentoo-webroot
28 into /var/www/localhost - useful if you put your own website there.
29 * And much more, including the fixing of many many bugs.
30
31 These changes will stabilized on Sunday, September 18th. These changes
32 have been throughly tested and given a thumbs up by many many users. They
33 also allow you to use the new php (including support for php5) ebuilds
34 when they become fully available.
35
36 Because of these changes and improvements, when you upgrade to the new
37 revision of Apache, you will need to take care of some things. These are
38 fully documented in our Upgrading Apache document [1], but in summary,
39 this is what you will need to do:
40
41 * Merge any customizations that you have made to the Apache configuration
42 into the new configuration at /etc/apache2/httpd.conf (The configuration
43 file location has changed). Note that the init script for apache checks
44 for a configuration in the old location and refuses to start if you
45 haven't moved/removed it - this is to avoid the possibility of moving to a
46 configuration that isn't right for your machine.
47 * Update any modules that you used to revisions that support the new
48 eclass. Older modules will not work due to location changes.
49 * Restart Apache
50 We have done our best to make it easy to migrate, but if you have
51 problems, feel free to visit us in #gentoo-apache on irc.freenode.net or
52 on our mailing list gentoo-web-user@g.o and we'll be glad to help.
53
54 =========================
55 2. Heard in the community
56 =========================
57
58 gentoo-dev
59 ----------
60
61 USE="minimal" for kernel sources
62
63 The kernel sources are rather large, but carry "unneeded" things like
64 assembler sources for all arches you don't have. So why not strip down the
65 kernel sources to be as small as possible, saving important diskspace in
66 the process? This thread discusses why Gentoo won't offer such a kernel
67 and why it's in general a bad idea to strip down the kernel sources.
68
69 * USE="minimal" for kernel sources [1]
70 1. http://thread.gmane.org/gmane.linux.gentoo.devel/31146
71
72 [Summary] tentative x86 arch team glep
73
74 Chris White[2] has done it again and offers a summary of one of those
75 horrifically long threads that make reading the -dev mailinglist so
76 time-consuming. Thanks Chris!
77 2. chriswhite@g.o
78
79 * [Summary] tentative x86 arch team glep[3]
80 3. http://thread.gmane.org/gmane.linux.gentoo.devel/31169
81
82 ======================
83 3. Gentoo in the press
84 ======================
85
86 ComputerWorld (9 September 2005)
87 --------------------------------
88
89 "One of the open-source movement's most visible boosters" Eric S.
90 Raymond[4] seems to have had a narrow escape from being lured into the
91 same sort of position that Gentoo founder Daniel Robbins now occupies with
92 Microsoft, writes Robert McMillan in a ComputerWorld article[5]. Given the
93 fact that the publisher of the Halloween documents might feel more than
94 just a little out of place at the company he's been fighting quite eagerly
95 for years, it may have been oversight on behalf of a recruiter who just
96 didn't know exactly who he was trying to hire...
97 4. http://www.catb.org/~esr/
98 5.
99 http://www.computerworld.com/softwaretopics/software/story/0,10801,104530,0
100 0.html
101
102 REBOL website (9 September 2005)
103 --------------------------------
104
105 Carl Sassenroth, head of REBOL Technologies, has extended the reach of his
106 programming language/operating environment to a new platform, as he
107 explains in a short notice about REBOL for Linux on PPC[6], tested on the
108 PegasosPPC[7] in both Gentoo and Debian Linux, and ready for download to
109 whoever would like to try it out.
110 6. http://www.rebol.net/article/0204.html
111 7. http://vendors.gentoo.org/index.cgi?page=1&comGroup=1
112
113 ==================
114 4. Tips and tricks
115 ==================
116
117 Tweaking kernel options yet some more
118 -------------------------------------
119
120 Remember our rather concise tip about the search function[8] in the
121 kernel's make menuconfig last week? A related tip is particularly helpful
122 whenever you're trying to do something like eradicate an unknown
123 dependency. For example, let's say that you want to change your kernel
124 configuration from modular to monolithic. But when you try to make that
125 change, it is blocked because there are still features marked "M"
126 somewhere.
127 8. http://www.gentoo.org/news/en/gwn/20050905-newsletter.xml#doc_chap6
128
129 An easy way to hunt these hidden dependencies down is to "Save
130 Configuration to an Alternate File" first, picking something like
131 .config.now (i.e. just type ".now" enter). Next, jump to another console
132 and look at the file:
133
134 +-------------------------------------------------------------------------+
135 | Code Listing 4.1: |
136 | Read the config file |
137 +-------------------------------------------------------------------------+
138 | |
139 |less /usr/src/kernel/.config.now |
140 | |
141 +-------------------------------------------------------------------------+
142
143 Now have a look at the real product of menuconfig. Just search:
144
145 +-------------------------------------------------------------------------+
146 | Code Listing 4.2: |
147 | Search for modular options |
148 +-------------------------------------------------------------------------+
149 | |
150 |/=m |
151 | |
152 +-------------------------------------------------------------------------+
153
154 Once you've found where the offending area is, you can go back to make
155 menuconfig and use last week's tip to search for its location in the
156 hierarchy (if it's still not clear).
157
158 This tip is especially handy when trying to create a minimal system and
159 you find that the kernel has been packed full of support for obsolete
160 hardware that escaped your first review. By searching through the .config
161 file while using menuconfig, you can really expand on its capabilities.
162
163 ===========================
164 5. Moves, adds, and changes
165 ===========================
166
167 Moves
168 -----
169
170 The following developers recently left the Gentoo team:
171
172 * None this week
173
174 Adds
175 ----
176
177 The following developers recently joined the Gentoo Linux team:
178
179 * Matti Bickel (mabi) - Arch tester for PPC
180 * Christian Hartmann (ian) - Official staff (Global forums moderator)
181 * Mauricio Lima Pilla (pilla) - Official staff (Global forums moderator)
182
183 Changes
184 -------
185
186 The following developers recently changed roles within the Gentoo Linux
187 project:
188
189 * None this week
190
191 ==================
192 6. Gentoo Security
193 ==================
194
195 OpenTTD: Format string vulnerabilities
196 --------------------------------------
197
198 OpenTTD is vulnerable to format string vulnerabilities which may result in
199 remote execution of arbitrary code.
200
201 For more information, please see the GLSA Announcement[9]
202 9. http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml
203
204 phpLDAPadmin: Authentication bypass
205 -----------------------------------
206
207 A flaw in phpLDAPadmin may allow attackers to bypass security restrictions
208 and connect anonymously.
209
210 For more information, please see the GLSA Announcement[10]
211 10. http://www.gentoo.org/security/en/glsa/glsa-200509-04.xml
212
213 Net-SNMP: Insecure RPATH
214 ------------------------
215
216 The Gentoo Net-SNMP package may provide Perl modules containing an
217 insecure DT_RPATH, potentially allowing privilege escalation.
218
219 For more information, please see the GLSA Announcement[11]
220 11. http://www.gentoo.org/security/en/glsa/glsa-200509-05.xml
221
222 Squid: Denial of Service vulnerabilities
223 ----------------------------------------
224
225 Squid contains several bugs when handling certain malformed requests
226 resulting in a Denial of Service.
227
228 For more information, please see the GLSA Announcement[12]
229 12. http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml
230
231 ===========
232 7. Bugzilla
233 ===========
234
235 Summary
236 -------
237
238 * Statistics
239 * Closed bug ranking
240 * New bug rankings
241
242 Statistics
243 ----------
244
245 The Gentoo community uses Bugzilla (bugs.gentoo.org[13]) to record and
246 track bugs, notifications, suggestions and other interactions with the
247 development team. Between 04 September 2005 and 11 September 2005,
248 activity on the site has resulted in:
249 13. http://bugs.gentoo.org
250
251 * 794 new bugs during this period
252 * 386 bugs closed or resolved during this period
253 * 29 previously closed bugs were reopened this period
254
255 Of the 8269 currently open bugs: 97 are labeled 'blocker', 198 are labeled
256 'critical', and 543 are labeled 'major'.
257
258 Closed bug rankings
259 -------------------
260
261 The developers and teams who have closed the most bugs during this period
262 are:
263
264 * AMD64 Porting Team[14], with 47 closed bugs[15]
265 * Java team[16], with 23 closed bugs[17]
266 * Gentoo Linux Gnome Desktop Team[18], with 18 closed bugs[19]
267 * Gentoo Games[20], with 14 closed bugs[21]
268 * Shyam Mani[22], with 11 closed bugs[23]
269 * Gentoo X-windows packagers[24], with 10 closed bugs[25]
270 * ppc64 architecture team[26], with 10 closed bugs[27]
271 * PHP Bugs[28], with 10 closed bugs[29]
272 14. amd64@g.o
273 15.
274 http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=amd64@g.o
275 16. java@g.o
276 17.
277 http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=java@g.o
278 18. gnome@g.o
279 19.
280 http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=gnome@g.o
281 20. games@g.o
282 21.
283 http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=games@g.o
284 22. fox2mike@g.o
285 23.
286 http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=fox2mike@g.o
287 24. x11@g.o
288 25.
289 http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=x11@g.o
290 26. ppc64@g.o
291 27.
292 http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=ppc64@g.o
293 28. php-bugs@g.o
294 29.
295 http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-09-04&chfieldto=2005-09-11&resolution=FIXED&assigned_to=php-bugs@g.o
296
297 New bug rankings
298 ----------------
299
300 The developers and teams who have been assigned the most new bugs during
301 this period are:
302
303 * Elfyn McBratney[30], with 56 new bugs[31]
304 * Default Assignee for New Packages[32], with 44 new bugs[33]
305 * Perl Ebuild Requests[34], with 24 new bugs[35]
306 * Gentoo Sound Team[36], with 9 new bugs[37]
307 * Qmail Team[38], with 8 new bugs[39]
308 * Default Assignee for Orphaned Packages[40], with 8 new bugs[41]
309 * AMD64 Porting Team[42], with 7 new bugs[43]
310 * Gentoo Toolchain Maintainers[44], with 6 new bugs[45]
311 30. beu@g.o
312 31.
313 http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=beu@g.o
314 32. maintainer-wanted@g.o
315 33.
316 http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=maintainer-wanted@g.o
317 34. perl-request@g.o
318 35.
319 http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=perl-request@g.o
320 36. sound@g.o
321 37.
322 http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=sound@g.o
323 38. qmail-bugs@g.o
324 39.
325 http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=qmail-bugs@g.o
326 40. maintainer-needed@g.o
327 41.
328 http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=maintainer-needed@g.o
329 42. amd64@g.o
330 43.
331 http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=amd64@g.o
332 44. toolchain@g.o
333 45.
334 http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-09-04&chfieldto=2005-09-11&assigned_to=toolchain@g.o
335
336 ===============
337 8. GWN feedback
338 ===============
339
340 Please send us your feedback[46] and help make the GWN better.
341 46. gwn-feedback@g.o
342
343 ===============================
344 9. GWN subscription information
345 ===============================
346
347 To subscribe to the Gentoo Weekly Newsletter, send a blank email to
348 gentoo-gwn+subscribe@g.o.
349
350 To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to
351 gentoo-gwn+unsubscribe@g.o from the email address you are
352 subscribed under.
353
354 ===================
355 10. Other languages
356 ===================
357
358 The Gentoo Weekly Newsletter is also available in the following languages:
359
360 * Danish[47]
361 * Dutch[48]
362 * English[49]
363 * German[50]
364 * French[51]
365 * Japanese[52]
366 * Italian[53]
367 * Polish[54]
368 * Portuguese (Brazil)[55]
369 * Portuguese (Portugal)[56]
370 * Russian[57]
371 * Spanish[58]
372 * Turkish[59]
373 47. http://www.gentoo.org/news/da/gwn/gwn.xml
374 48. http://www.gentoo.org/news/nl/gwn/gwn.xml
375 49. http://www.gentoo.org/news/en/gwn/gwn.xml
376 50. http://www.gentoo.org/news/de/gwn/gwn.xml
377 51. http://www.gentoo.org/news/fr/gwn/gwn.xml
378 52. http://www.gentoo.org/news/ja/gwn/gwn.xml
379 53. http://www.gentoo.org/news/it/gwn/gwn.xml
380 54. http://www.gentoo.org/news/pl/gwn/gwn.xml
381 55. http://www.gentoo.org/news/pt_br/gwn/gwn.xml
382 56. http://www.gentoo.org/news/pt/gwn/gwn.xml
383 57. http://www.gentoo.org/news/ru/gwn/gwn.xml
384 58. http://www.gentoo.org/news/es/gwn/gwn.xml
385 59. http://www.gentoo.org/news/tr/gwn/gwn.xml
386
387 Ulrich Plate <plate@g.o> - Editor
388 Chris X Edwards <chris@×××.ch> - Author
389 Patrick Lauer <patrick@g.o> - Author
390 Michael Stewart <vericgar@g.o> - Author
391
392 --
393 gentoo-gwn@g.o mailing list