[gentoo-gwn] Gentoo Weekly Newsletter 24 October 2005

[Ulrich Plate]

---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of 24 October 2005.
---------------------------------------------------------------------------
 
==============
1. Gentoo news
==============
  
Gentoo SGI LiveCD released
--------------------------
  
Joshua Kinard[1] released a bootable CD for Silicon Graphics machines, his 
fifth release candidate that builds on earlier efforts[2], and adds the 
SGI Origin (IP27) series to the list of supported hardware. This 
outstanding achievement -- other than IRIX installation media, this is the 
only bootable CD for SGI systems -- was largely built using Catalyst 2, 
the release engineering tool's next generation, and is again making use of 
Stanislaw Skowronek's ARCLoad bootloader and other tools. 
 1. kumba@g.o
 2. 
http://www.gentoo.org/news/en/gwn/20050613-newsletter.xml#doc_chap1_sect2
 
Carefully check the instructions in Joshua's README[3] to the CD image 
that can be found in the experimental MIPS section of Gentoo's mirrors[4]. 
In particular, CDs need to be burnt with cdrecord to make sure the 
IRIX-like partitioned disk structure is preserved. 
 3. http://dev.gentoo.org/~kumba/mips/releases/livecd-rc5/README
 4. http://www.gentoo.org/main/en/mirrors.xml
    
Gentoo Linux/MIPS 2005.1 stages for Cobalt released
---------------------------------------------------
  
More good news for MIPS users, this one for owners of Cobalt Qubes and 
RaQs: Stuart Longland[5] announced that he finished building the stages 
for Gentoo Linux/MIPS 2005.1 installations on the popular little-endian 
appliances of the Cobalt Networks server series[6]. Netboot images will be 
made available later, the stages can already be downloaded from Stuart's 
devspace[7] before they hit the official Gentoo mirrors later this month. 
 5. redhatter@g.o
 6. http://dev.gentoo.org/~redhatter/mips/cobalt/about_cobalt.html
 7. http://dev.gentoo.org/~redhatter/mips/cobalt/stages/
    
=========================
2. Heard in the community
=========================
  
Web forums
----------
  
Openoffice 2.0 is out
 
Greeted by many Forums users, the stable version of OOo 2.0 has hit the 
Portage tree last week, mere hours after the official announcement. In the 
main thread, developer Andreas Proschofsky[8] explains the benefits of 
compiling the package (better KDE integration, Gentoo splashscreen) and 
clarifies that it will not build with Java 1.5: 
 8. suka@g.o
 
 * OpenOffice.org 2.0.0 final released[9]  
 9. https://forums.gentoo.org/viewtopic-t-393445.html
    
======================
3. Gentoo in the press
======================
  
Information Week (17 October 2005)
----------------------------------
  
In an article titled Open doors to innovation[10], author Larry 
Greenemeier of Information Week reports on small and medium-sized 
companies "creating IT infrastructures based on open-source software to 
reduce licensing fees and increase flexibility." One of the examples 
featuring in his concise overview of the many good uses open-source 
software is being put to is a company called Feedster[11], a blog 
aggregator service in San Francisco where 60 out of 75 servers run Gentoo 
to do the job of "pumping out the RSS feeds." 
 10. 
http://www.informationweek.com/story/showArticle.jhtml?articleID=172300923
 11. http://feedster.com/
    
==================
4. Tips and tricks
==================
  
Rebuilding modules after a kernel upgrade
-----------------------------------------
  
module-rebuild is a tool written by Gentoo developer John Mylchreest[12] 
that serves a very simple, but utterly useful purpose: Whenever you've 
upgraded your kernel to a newer version, this script hunts down all 
packages that use -- now outdated -- kernel modules and rebuilds them for 
you. 
 12. johnm@g.o
 
Suppose you've just booted into a freshly updated kernel. First of all, 
check which packages are using modules that haven't been built with the 
new sources yet: 
 
+-------------------------------------------------------------------------+
| Code Listing 4.1:                                                       |
| List packages                                                           |
+-------------------------------------------------------------------------+
|                                                                         |
|# module-rebuild list                                                    |
|                                                                         |
+-------------------------------------------------------------------------+
 
So, in case you've got any wireless drivers, exotic filesystems, anything 
else that relies on kernel modules, chances are you've just found them 
listed as a result of the above, and then you can rebuild them all by 
simply going: 
 
+-------------------------------------------------------------------------+
| Code Listing 4.2:                                                       |
| Rebuild all affected packages                                           |
+-------------------------------------------------------------------------+
|                                                                         |
|# module-rebuild rebuild                                                 |
|                                                                         |
+-------------------------------------------------------------------------+
 
Voila. Thanks to this little routine, you don't need to keep a mental list 
of things to do after a kernel update any longer. 
 
Note: Thanks to Forum user Sir No for unearthing this utility.
    
===========================
5. Moves, adds, and changes
===========================
  
Moves
-----
  
The following developers recently left the Gentoo team: 
 
 * None this week 
    
Adds
----
  
The following developers recently joined the Gentoo Linux team: 
 
 * Luca Longinotti (chtekk) - Apache, webapps, PHP 
    
Changes
-------
  
The following developers recently changed roles within the Gentoo Linux 
project:
 
 * None this week 
    
==================
6. Gentoo Security
==================
   
Perl, Qt-UnixODBC, CMake: RUNPATH issues
----------------------------------------
  
Multiple packages suffer from RUNPATH issues that may allow users in the 
"portage" group to escalate privileges. 
 
For more information, please see the GLSA Announcement[13] 
 13. http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml
    
Lynx: Buffer overflow in NNTP processing
----------------------------------------
  
Lynx contains a buffer overflow that may be exploited to execute arbitrary 
code. 
 
For more information, please see the GLSA Announcement[14] 
 14. http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml
    
phpMyAdmin: Local file inclusion vulnerability
----------------------------------------------
  
phpMyAdmin contains a local file inclusion vulnerability that may lead to 
the execution of arbitrary code. 
 
For more information, please see the GLSA Announcement[15] 
 15. http://www.gentoo.org/security/en/glsa/glsa-200510-16.xml
    
AbiWord: New RTF import buffer overflows
----------------------------------------
  
AbiWord is vulnerable to an additional set of buffer overflows during RTF 
import, making it vulnerable to the execution of arbitrary code. 
 
For more information, please see the GLSA Announcement[16] 
 16. http://www.gentoo.org/security/en/glsa/glsa-200510-17.xml
    
Netpbm: Buffer overflow in pnmtopng
-----------------------------------
  
The pnmtopng utility, part of the Netpbm tools, contains a vulnerability 
which can potentially result in the execution of arbitrary code. 
 
For more information, please see the GLSA Announcement[17] 
 17. http://www.gentoo.org/security/en/glsa/glsa-200510-18.xml
    
cURL: NTLM username stack overflow
----------------------------------
  
cURL is vulnerable to a buffer overflow which could lead to the execution 
of arbitrary code. 
 
For more information, please see the GLSA Announcement[18] 
 18. http://www.gentoo.org/security/en/glsa/glsa-200510-19.xml
     
===========
7. Bugzilla
===========
  
Summary
-------
  
 * Statistics 
 * Closed bug ranking 
 * New bug rankings 
    
Statistics
----------
  
The Gentoo community uses Bugzilla (bugs.gentoo.org[19]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 16 October 2005 and 23 October 2005, activity on 
the site has resulted in: 
 19. http://bugs.gentoo.org
 
 * 774 new bugs during this period 
 * 391 bugs closed or resolved during this period 
 * 22 previously closed bugs were reopened this period 
 
Of the 8753 currently open bugs: 108 are labeled 'blocker', 186 are 
labeled 'critical', and 562 are labeled 'major'. 
    
Closed bug rankings
-------------------
  
The developers and teams who have closed the most bugs during this period 
are: 
 
 * Gentoo Sound Team[20], with 24 closed bugs[21]  
 * Gentoo KDE team[22], with 21 closed bugs[23]  
 * Portage team[24], with 18 closed bugs[25]  
 * Gentoo Games[26], with 17 closed bugs[27]  
 * Stefano Rossi[28], with 15 closed bugs[29]  
 * Gentoo Security[30], with 11 closed bugs[31]  
 * Jeremy Huddleston[32], with 10 closed bugs[33]  
 * Seemant Kulleen[34], with 9 closed bugs[35]  
 20. sound@g.o
 21. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=sound@g.o
 22. kde@g.o
 23. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=kde@g.o
 24. dev-portage@g.o
 25. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=dev-portage@g.o
 26. games@g.o
 27. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=games@g.o
 28. so@g.o
 29. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=so@g.o
 30. security@g.o
 31. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=security@g.o
 32. eradicator@g.o
 33. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=eradicator@g.o
 34. seemant@g.o
 35. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-10-16&chfieldto=2005-10-23&resolution=FIXED&assigned_to=seemant@g.o
    
New bug rankings
----------------
  
The developers and teams who have been assigned the most new bugs during 
this period are: 
 
 * Default Assignee for New Packages[36], with 41 new bugs[37]  
 * AMD64 Porting Team[38], with 18 new bugs[39]  
 * Gentoo Sound Team[40], with 16 new bugs[41]  
 * Gentoo Linux Gnome Desktop Team[42], with 14 new bugs[43]  
 * Gentoo Games[44], with 11 new bugs[45]  
 * Gentoo Developer Relations Team[46], with 10 new bugs[47]  
 * X11 External Driver Maintainers[48], with 9 new bugs[49]  
 * Default Assignee for Orphaned Packages[50], with 9 new bugs[51]  
 36. maintainer-wanted@g.o
 37. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=maintainer-wanted@g.o
 38. amd64@g.o
 39. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=amd64@g.o
 40. sound@g.o
 41. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=sound@g.o
 42. gnome@g.o
 43. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=gnome@g.o
 44. games@g.o
 45. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=games@g.o
 46. devrel@g.o
 47. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=devrel@g.o
 48. x11-drivers@g.o
 49. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=x11-drivers@g.o
 50. maintainer-needed@g.o
 51. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-10-16&chfieldto=2005-10-23&assigned_to=maintainer-needed@g.o
    
===============
8. GWN feedback
===============
   
Please send us your feedback[52] and help make the GWN better. 
 52. gwn-feedback@g.o
    
===============================
9. GWN subscription information
===============================
   
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn+subscribe@g.o. 
 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn+unsubscribe@g.o from the email address you are 
subscribed under.
    
===================
10. Other languages
===================
   
The Gentoo Weekly Newsletter is also available in the following languages:
 
 * Danish[53]  
 * Dutch[54]  
 * English[55]  
 * German[56]  
 * French[57]  
 * Japanese[58]  
 * Italian[59]  
 * Polish[60]  
 * Portuguese (Brazil)[61]  
 * Portuguese (Portugal)[62]  
 * Russian[63]  
 * Spanish[64]  
 * Turkish[65]  
 53. http://www.gentoo.org/news/da/gwn/gwn.xml
 54. http://www.gentoo.org/news/nl/gwn/gwn.xml
 55. http://www.gentoo.org/news/en/gwn/gwn.xml
 56. http://www.gentoo.org/news/de/gwn/gwn.xml
 57. http://www.gentoo.org/news/fr/gwn/gwn.xml
 58. http://www.gentoo.org/news/ja/gwn/gwn.xml
 59. http://www.gentoo.org/news/it/gwn/gwn.xml
 60. http://www.gentoo.org/news/pl/gwn/gwn.xml
 61. http://www.gentoo.org/news/pt_br/gwn/gwn.xml
 62. http://www.gentoo.org/news/pt/gwn/gwn.xml
 63. http://www.gentoo.org/news/ru/gwn/gwn.xml
 64. http://www.gentoo.org/news/es/gwn/gwn.xml
 65. http://www.gentoo.org/news/tr/gwn/gwn.xml
   
Ulrich Plate <plate@g.o> - Editor

-- 
gentoo-gwn@g.o mailing list