[gentoo-gwn] Gentoo Weekly Newsletter 19 February 2006

[Chris Gianelloni]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/20070219-newsletter.xml
This is the Gentoo Weekly Newsletter for the week of 19 February 2007.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

==============
1. Gentoo News
==============

A warning about upcoming changes to ALSA
----------------------------------------

In the past days there were a few changes to two ALSA packages,
media-sound/alsa-firmware-1.0.14_rc2-r1 and
media-sound/alsa-tools-1.0.14_rc1-r1. These two ebuilds now make use of the
ALSA_CARDS variable to decide which firmwares to install and which tools to
build. The ALSA_CARDS was already being used by media-sound/alsa-driver
package, so users of that package should be already done, as they most
likely have that already set; for users using the in-kernel drivers, they
should now properly set that variable, also. Please see
/usr/portage/profiles/desc/alsa_cards.desc for a list of available
ALSA_CARDS values.

Note: With ALSA_CARDS unset (or if you're not using any of the drivers that
are listed for alsa-firmware or alsa-tools), the two packages will still
install a minimal set of tools or firmwares, but you might not be needing
them at all.

=========================
2. Heard in the community
=========================

forums.gentoo.org
-----------------

Why I don't care if you are dropping recommend of Gentoo

In a long forum post, chrisfeet tells the story of how Gentoo became his
favorite. Written as a rebuttal of sorts to the negative comments in Why I'm
dropping recommendation of Gentoo[1] he states that the elegance and power
of a Gentoo system is what draws him to it, even after experiencing the
user-friendliness of Ubuntu.

   1. http://forums.gentoo.org/viewtopic-t-313315.html

  * http://forums.gentoo.org/viewtopic-t-540021.html

======================
3. Gentoo in the press
======================

iWon News (16 Feb 2007)
-----------------------

Cuba's Cabinet also has urged a shift from proprietary software. The customs
service has gone to Linux and the ministries of culture, higher education
and communications are planning to do so, Rodriguez said. Students in his
own department are cooking up a version of Linux called Nova, based on the
Gentoo distribution of the operating system. The ministry of higher
education is developing its own distribution.

  * http://apnews1.iwon.com//article/20070216/D8NB1EK05.html

=========================
4. Gentoo developer moves
=========================

Moves
-----

The following developers recently left the Gentoo project:

  * none this week

Adds
----

The following developers recently joined the Gentoo project:

  * Richard Brown (rbrown) QA/Ruby teams

Changes
-------

The following developers recently changed roles within the Gentoo project:

  * none this week

==================
5. Gentoo Security
==================

Samba: Multiple vulnerabilities
-------------------------------

Multiple flaws exist in the Samba suite of programs, the most serious of
which could result in the execution of arbitrary code.

For more information, please see the GLSA Announcement[2]

   2. http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml

ProFTPD: Local privilege escalation
-----------------------------------

A flaw in ProFTPD may allow a local attacker to obtain root privileges.

For more information, please see the GLSA Announcement[3]

   3. http://www.gentoo.org/security/en/glsa/glsa-200702-02.xml

Snort: Denial of Service
------------------------

Snort contains a vulnerability in the rule matching algorithm that could
result in a Denial of Service.

For more information, please see the GLSA Announcement[4]

   4. http://www.gentoo.org/security/en/glsa/glsa-200702-03.xml

RAR, UnRAR: Buffer overflow
---------------------------

RAR and UnRAR contain a buffer overflow allowing the execution of arbitrary
code.

For more information, please see the GLSA Announcement[5]

   5. http://www.gentoo.org/security/en/glsa/glsa-200702-04.xml

Fail2ban: Denial of Service
---------------------------

A flaw in Fail2ban may allow remote attackers to deny access to arbitrary
hosts.

For more information, please see the GLSA Announcement[6]

   6. http://www.gentoo.org/security/en/glsa/glsa-200702-05.xml

BIND: Denial of Service
-----------------------

ISC BIND contains two vulnerabilities allowing a Denial of Service under
certain conditions.

For more information, please see the GLSA Announcement[7]

   7. http://www.gentoo.org/security/en/glsa/glsa-200702-06.xml

Sun JDK/JRE: Execution of arbitrary code
----------------------------------------

Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) contain a
memory corruption flaw that allows the applets to gain elevated privileges
potentially leading to the execute of arbitrary code.

For more information, please see the GLSA Announcement[8]

   8. http://www.gentoo.org/security/en/glsa/glsa-200702-07.xml

AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities
------------------------------------------------------------------------

Multiple unspecified vulnerabilities have been identified in Sun Java
Development Kit (JDK) and Sun Java Runtime Environment (JRE).

For more information, please see the GLSA Announcement[9]

   9. http://www.gentoo.org/security/en/glsa/glsa-200702-08.xml

=======================
6. Gentoo package moves
=======================

This section lists packages that have either been moved or added to the tree
and packages that have had their "last rites" announcement given to be
removed in the future. The package removals come from many locations,
including the Treecleaners[10] and various developers. Most packages which
are listed under the Last Rites section are in need of some love and care
and can remain in the tree if proper maintainership is established.

  10. http://www.gentoo.org/proj/en/qa/treecleaners

Removals:
---------

Package:                          Removal date: Contact:
net-p2p/teknap                    12 Feb 2007   Raúl Porcel[11]
app-emacs/w3                      12 Feb 2007   Christian Faulhammer[12]
app-emacs/weather                 12 Feb 2007   Christian Faulhammer[12]
sys-cluster/gomd                  18 Feb 2007   Daniel Drake[13]
sys-cluster/gomd-cvs              18 Feb 2007   Daniel Drake[13]
sys-cluster/openmosix-3dmon       18 Feb 2007   Daniel Drake[13]
sys-cluster/openmosix-3dmon-stats 18 Feb 2007   Daniel Drake[13]
sys-cluster/openmosix-user        18 Feb 2007   Daniel Drake[13]
sys-cluster/openmosixtest         18 Feb 2007   Daniel Drake[13]
sys-cluster/openmosixview         18 Feb 2007   Daniel Drake[13]
sys-cluster/openmosixwebview      18 Feb 2007   Daniel Drake[13]
sys-kernel/openmosix-sources      18 Feb 2007   Daniel Drake[13]

  11. armin76@g.o
  12. opfer@g.o
  13. dsd@g.o

Additions:
----------

Package:                               Addition date: Contact:
dev-libs/cyberjack[14]                 12 Feb 2007    Wolfram Schlich[15]
net-p2p/museek+[16]                    12 Feb 2007    Raúl Porcel[11]
app-text/wgetpaste[17]                 12 Feb 2007    Alexander Færøy[18]
sys-auth/pam-afs-session[19]           12 Feb 2007    Stefaan De Roeck[20]
media-sound/alsaplayer[21]             13 Feb 2007    Ryan Hill[22]
dev-ada/tash[23]                       13 Feb 2007    George Shapovalov[24]
media-sound/amarokfs[25]               13 Feb 2007    Diego Pettenò[26]
dev-lang/mozart[27]                    14 Feb 2007    Keri Harris[28]
games-util/taxidraw[29]                14 Feb 2007    Tristan Heaven[30]
games-action/blobandconquer[31]        15 Feb 2007    Tristan Heaven[30]
dev-util/codeblocks[32]                15 Feb 2007    Jurek Bartuszek[33]
app-emulation/virtualbox-additions[34] 15 Feb 2007    Markus Ullmann[35]
app-emulation/virtualbox-bin[36]       15 Feb 2007    Markus Ullmann[35]
app-office/mozilla-sunbird[37]         15 Feb 2007    Raúl Porcel[11]
net-firewall/fireflier[38]             15 Feb 2007    Markus Ullmann[35]
x11-themes/domino[39]                  16 Feb 2007    Diego Pettenò[26]
dev-lang/mozart-stdlib[40]             16 Feb 2007    Keri Harris[28]
dev-ruby/ruby-irc[41]                  17 Feb 2007    Robin H. Johnson[42]
dev-ruby/cerberus[43]                  17 Feb 2007    Robin H. Johnson[42]
media-gfx/asymptote[44]                17 Feb 2007    Dominik Stadler[45]
games-arcade/spacerider[46]            18 Feb 2007    Alfredo Tupone[47]
app-crypt/coolkey[48]                  18 Feb 2007    Alon Bar-Lev[49]
xfce-extra/thunar-thumbnailers[50]     18 Feb 2007    Samuli Suominen[51]
app-portage/demerge[52]                18 Feb 2007    Christian Hartmann[53]
dev-util/imediff2[54]                  18 Feb 2007    Tiziano Müller[55]

  11. armin76@g.o
  14. http://packages.gentoo.org/packages/?category=dev-libs;name=cyberjack
  15. wschlich@g.o
  16. http://packages.gentoo.org/packages/?category=net-p2p;name=museek+
  17. http://packages.gentoo.org/packages/?category=app-text;name=wgetpaste
  18. eroyf@g.o
  19. http://packages.gentoo.org/packages/?category=sys-auth;name=pam-afs-session
  20. stefaan@g.o
  21. http://packages.gentoo.org/packages/?category=media-sound;name=alsaplayer
  22. dirtyepic@g.o
  23. http://packages.gentoo.org/packages/?category=dev-ada;name=tash
  24. george@g.o
  25. http://packages.gentoo.org/packages/?category=media-sound;name=amarokfs
  26. flameeyes@g.o
  27. http://packages.gentoo.org/packages/?category=dev-lang;name=mozart
  28. keri@g.o
  29. http://packages.gentoo.org/packages/?category=games-util;name=taxidraw
  30. nyhm@g.o
  31. http://packages.gentoo.org/packages/?category=games-action;name=blobandconquer
  32. http://packages.gentoo.org/packages/?category=dev-util;name=codeblocks
  33. jurek@g.o
  34. http://packages.gentoo.org/packages/?category=app-emulation;name=virtualbox-additions
  35. jokey@g.o
  36. http://packages.gentoo.org/packages/?category=app-emulation;name=virtualbox-bin
  37. http://packages.gentoo.org/packages/?category=app-office;name=mozilla-sunbird
  38. http://packages.gentoo.org/packages/?category=net-firewall;name=fireflier
  39. http://packages.gentoo.org/packages/?category=x11-themes;name=domino
  40. http://packages.gentoo.org/packages/?category=dev-lang;name=mozart-stdlib
  41. http://packages.gentoo.org/packages/?category=dev-ruby;name=ruby-irc
  42. robbat2@g.o
  43. http://packages.gentoo.org/packages/?category=dev-ruby;name=cerberus
  44. http://packages.gentoo.org/packages/?category=media-gfx;name=asymptote
  45. centic@g.o
  46. http://packages.gentoo.org/packages/?category=games-arcade;name=spacerider
  47. tupone@g.o
  48. http://packages.gentoo.org/packages/?category=app-crypt;name=coolkey
  49. alonbl@g.o
  50. http://packages.gentoo.org/packages/?category=xfce-extra;name=thunar-thumbnailers
  51. drac@g.o
  52. http://packages.gentoo.org/packages/?category=app-portage;name=demerge
  53. ian@g.o
  54. http://packages.gentoo.org/packages/?category=dev-util;name=imediff2
  55. dev-zero@g.o

Last Rites:
-----------

Note: Due to a mistake last week, the Last Rites section was not included.
This week, the GWN has 2 weeks worth of Last Rites listed below.

Package:                         Removal date: Contact:
net-misc/yasuc[56]               28 Feb 2007   Krzysiek Pawlik[57]
net-libs/gecko-sdk[58]           04 Mar 2007   Raúl Porcel[11]
media-tv/rivatv[59]              06 Mar 2007   Doug Goldstein[60]
dev-java/jess-bin[61]            09 Mar 2007   Petteri Räty[62]
sys-fs/raidtools[63]             11 Mar 2007   Mike Frysinger[64]
dev-libs/libtc[65]               11 Mar 2007   Samuli Suominen[51]
dev-libs/tc2[66]                 11 Mar 2007   Samuli Suominen[51]
dev-libs/tc2-modules[67]         11 Mar 2007   Samuli Suominen[51]
media-video/tcvp[68]             11 Mar 2007   Samuli Suominen[51]
app-portage/portage-prefpane[69] 11 Mar 2007   Michael Hanselmann[70]
net-analyzer/netwatch[71]        15 Mar 2007   Markkus Ullmann[35]
media-font/mekachan-font[72]     15 Mar 2007   Chris Gianelloni[73]
net-irc/cyclone[74]              17 Mar 2007   Raúl Porcel[11]
dev-perl/Text-ChaSen[75]         17 Mar 2007   Michael Cummings[76]
app-portage/emool[77]            18 Mar 2007   Simon Stelling[78]

  11. armin76@g.o
  35. jokey@g.o
  51. drac@g.o
  56. http://packages.gentoo.org/packages/?category=net-misc;name=yasuc
  57. nelchael@g.o
  58. http://packages.gentoo.org/packages/?category=net-libs;name=gecko-sdk
  59. http://packages.gentoo.org/packages/?category=media-tv;name=rivatv
  60. cardoe@g.o
  61. http://packages.gentoo.org/packages/?category=dev-java;name=jess-bin
  62. betelgeuse@g.o
  63. http://packages.gentoo.org/packages/?category=sys-fs;name=raidtools
  64. vapier@g.o
  65. http://packages.gentoo.org/packages/?category=dev-libs;name=libtc
  66. http://packages.gentoo.org/packages/?category=dev-libs;name=tc2
  67. http://packages.gentoo.org/packages/?category=dev-libs;name=tc2-modules
  68. http://packages.gentoo.org/packages/?category=media-video;name=tcvp
  69. http://packages.gentoo.org/packages/?category=app-portage;name=portage-prefpane
  70. hansmi@g.o
  71. http://packages.gentoo.org/packages/?category=net-analyzer;name=netwatch
  72. http://packages.gentoo.org/packages/?category=media-font;name=mikachan-font
  73. wolf31o2@g.o
  74. http://packages.gentoo.org/packages/?category=net-irc;name=cyclone
  75. http://packages.gentoo.org/packages/?category=dev-perl;name=Text-ChaSen
  76. mcummings@g.o
  77. http://packages.gentoo.org/packages/?category=app-portage;name=emool
  78. blubb@g.o

===========
7. Bugzilla
===========

Summary
-------

  * Statistics
  * Closed bug ranking
  * New bug rankings

Statistics
----------

The Gentoo community uses Bugzilla (bugs.gentoo.org[79]) to record and track
bugs, notifications, suggestions and other interactions with the development
team. Between 11 February 2007 and 18 February 2007, activity on the site
has resulted in:

  79. http://bugs.gentoo.org

  * 749 new bugs during this period
  * 450 bugs closed or resolved during this period
  * 33 previously closed bugs were reopened this period
  * 144 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this
    period
  * 109 bugs marked as duplicates during this period

Of the 10450 currently open bugs: 17 are labeled 'blocker', 115 are labeled
'critical', and 436 are labeled 'major'.

Closed bug rankings
-------------------

The developers and teams who have closed the most bugs during this period
are:

  * AMD64 Project[80], with 27 closed bugs[81]
  * Gentoo Games[82], with 24 closed bugs[83]
  * Java team[84], with 20 closed bugs[85]
  * Gentoo Linux Gnome Desktop Team[86], with 16 closed bugs[87]
  * Gentoo Security[88], with 15 closed bugs[89]
  * Gentoo Toolchain Maintainers[90], with 14 closed bugs[91]
  * Gentoo's Team for Core System packages[92], with 12 closed bugs[93]
  * Gentoo KDE team[94], with 11 closed bugs[95]

  80. amd64@g.o
  81. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2007-02-11&chfieldto=2007-02-18&resolution=FIXED&assigned_to=amd64@g.o
  82. games@g.o
  83. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2007-02-11&chfieldto=2007-02-18&resolution=FIXED&assigned_to=games@g.o
  84. java@g.o
  85. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2007-02-11&chfieldto=2007-02-18&resolution=FIXED&assigned_to=java@g.o
  86. gnome@g.o
  87. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2007-02-11&chfieldto=2007-02-18&resolution=FIXED&assigned_to=gnome@g.o
  88. security@g.o
  89. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2007-02-11&chfieldto=2007-02-18&resolution=FIXED&assigned_to=security@g.o
  90. toolchain@g.o
  91. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2007-02-11&chfieldto=2007-02-18&resolution=FIXED&assigned_to=toolchain@g.o
  92. base-system@g.o
  93. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2007-02-11&chfieldto=2007-02-18&resolution=FIXED&assigned_to=base-system@g.o
  94. kde@g.o
  95. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2007-02-11&chfieldto=2007-02-18&resolution=FIXED&assigned_to=kde@g.o

New bug rankings
----------------

The developers and teams who have been assigned the most new bugs during
this period are:

  * Default Assignee for New Packages[96], with 31 new bugs[97]
  * Java team[84], with 19 new bugs[98]
  * AMD64 Project[80], with 11 new bugs[99]
  * Gentoo Kernel Bug Wranglers and Kernel Maintainers[100], with 9 new
    bugs[101]
  * Perl Devs @ Gentoo[102], with 7 new bugs[103]
  * Default Assignee for Orphaned Packages[104], with 7 new bugs[105]
  * Gentoo Sound Team[106], with 6 new bugs[107]
  * Gentoo Linux Gnome Desktop Team[86], with 6 new bugs[108]

  80. amd64@g.o
  84. java@g.o
  86. gnome@g.o
  96. maintainer-wanted@g.o
  97. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2007-02-11&chfieldto=2007-02-18&assigned_to=maintainer-wanted@g.o
  98. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2007-02-11&chfieldto=2007-02-18&assigned_to=java@g.o
  99. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2007-02-11&chfieldto=2007-02-18&assigned_to=amd64@g.o
 100. kernel@g.o
 101. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2007-02-11&chfieldto=2007-02-18&assigned_to=kernel@g.o
 102. perl@g.o
 103. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2007-02-11&chfieldto=2007-02-18&assigned_to=perl@g.o
 104. maintainer-needed@g.o
 105. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2007-02-11&chfieldto=2007-02-18&assigned_to=maintainer-needed@g.o
 106. sound@g.o
 107. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2007-02-11&chfieldto=2007-02-18&assigned_to=sound@g.o
 108. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2007-02-11&chfieldto=2007-02-18&assigned_to=gnome@g.o

===============
8. GWN feedback
===============

The GWN is staffed by volunteers and members of the community who submit
ideas and articles. If you are interested in writing for the GWN, have
feedback on an article that we have posted, or just have an idea or article
that you would like to submit to the GWN, please send us your feedback[109]
and help make the GWN better.

 109. gwn-feedback@g.o

===============================
9. GWN subscription information
===============================

To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+subscribe@g.o.

To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+unsubscribe@g.o from the e-mail address you are subscribed
under.

===================
10. Other languages
===================

The Gentoo Weekly Newsletter is also available in the following languages:

  * Chinese (Simplified)[110]
  * Danish[111]
  * Dutch[112]
  * English[113]
  * German[114]
  * Greek[115]
  * French[116]
  * Korean[117]
  * Japanese[118]
  * Italian[119]
  * Polish[120]
  * Portuguese (Brazil)[121]
  * Portuguese (Portugal)[122]
  * Russian[123]
  * Slovak[124]
  * Spanish[125]
  * Turkish[126]

 110. http://www.gentoo.org/news/zh_cn/gwn/gwn.xml
 111. http://www.gentoo.org/news/da/gwn/gwn.xml
 112. http://www.gentoo.org/news/nl/gwn/gwn.xml
 113. http://www.gentoo.org/news/en/gwn/gwn.xml
 114. http://www.gentoo.org/news/de/gwn/gwn.xml
 115. http://www.gentoo.org/news/el/gwn/gwn.xml
 116. http://www.gentoo.org/news/fr/gwn/gwn.xml
 117. http://www.gentoo.org/news/ko/gwn/gwn.xml
 118. http://www.gentoo.org/news/ja/gwn/gwn.xml
 119. http://www.gentoo.org/news/it/gwn/gwn.xml
 120. http://www.gentoo.org/news/pl/gwn/gwn.xml
 121. http://www.gentoo.org/news/pt_br/gwn/gwn.xml
 122. http://www.gentoo.org/news/pt/gwn/gwn.xml
 123. http://www.gentoo.org/news/ru/gwn/gwn.xml
 124. http://www.gentoo.org/news/sk/gwn/gwn.xml
 125. http://www.gentoo.org/news/es/gwn/gwn.xml
 126. http://www.gentoo.org/news/tr/gwn/gwn.xml

Chris Gianelloni <wolf31o2@g.o> - Editor
Mark Kowarsky <mark_alec@g.o> - Author
Donnie Berkholz <dberkholz@g.o> - Author
Daniel Black <dragonheart@g.o> - Author
Diego Pettenò <flameeyes@×××××.com> - Author
Kieth Gable <ziggy@××××××××××××××××.com> - Contributor


-- 
gentoo-gwn@g.o mailing list