1 |
--------------------------------------------------------------------------- |
2 |
Gentoo Weekly Newsletter |
3 |
http://www.gentoo.org/news/en/gwn/current.xml |
4 |
This is the Gentoo Weekly Newsletter for the week of 23 October 2006. |
5 |
--------------------------------------------------------------------------- |
6 |
|
7 |
============== |
8 |
1. Gentoo news |
9 |
============== |
10 |
|
11 |
Gentoo Linux certified on Sun Fire T1000/T2000 |
12 |
---------------------------------------------- |
13 |
|
14 |
Gentoo Linux 2006.1 for SPARC is one of only two Linux distributions that |
15 |
have been certified[1] by Sun to run on their Sun Fire Servers with |
16 |
CoolThreads. These servers utilize the new UltraSPARC T1 processor. Sun |
17 |
has worked with the Gentoo/SPARC team[2] to ensure support of their latest |
18 |
servers in Gentoo Linux. Many thanks to Sun for also donating a Sun Fire |
19 |
T2000 server for the Foundation to use to further development on |
20 |
Gentoo/SPARC. |
21 |
|
22 |
1. http://www.sun.com/servers/coolthreads/tnb/linux.jsp |
23 |
2. http://www.gentoo.org/proj/en/base/sparc |
24 |
|
25 |
========================= |
26 |
2. Heard in the community |
27 |
========================= |
28 |
|
29 |
forums.gentoo.org |
30 |
----------------- |
31 |
|
32 |
Idea: Gentoo Automated Error Reporting/Resolution Client |
33 |
|
34 |
ThinkingInBinary posted an idea for an automated error reporting system to |
35 |
help out developers and users. The client would collect information after |
36 |
a crash and submit it to the developers. Besides automatically collecting |
37 |
data for the developers, the client could also give step-by-step |
38 |
instructions to the user if the problem has already been resolved. |
39 |
|
40 |
* http://forums.gentoo.org/viewtopic-t-507606.html |
41 |
|
42 |
gentoo-user |
43 |
----------- |
44 |
|
45 |
want to ditch kopete |
46 |
|
47 |
Roy Wright couldn't get rid of kopete-3.5.5-r1. When he tried to delete |
48 |
it, portage insisted on bringing it back and it prevented him from |
49 |
updating world. As a workaround, Neil Bothwick proposed: |
50 |
|
51 |
--------------------------------------------------------------------------- |
52 |
| Code Listing 2.1: | |
53 |
|Adding kopete to package.provided | |
54 |
--------------------------------------------------------------------------- |
55 |
| | |
56 |
|# mkdir -p /etc/portage/profile | |
57 |
|# echo "kde-base/kopete-3.5.5-r1" >>/etc/portage/profile/package.provided| |
58 |
| | |
59 |
--------------------------------------------------------------------------- |
60 |
|
61 |
Roy reported the problem solved, but wondered what he'd done. User bn |
62 |
explained that he'd convinced portage that kopete was installed even |
63 |
though it wasn't. Haarm Geerts pointed out that this was a workaround |
64 |
rather than a solution and that it might come back to haunt Roy someday in |
65 |
the future. |
66 |
|
67 |
* http://thread.gmane.org/gmane.linux.gentoo.user/172526 |
68 |
|
69 |
xorg-server update problem |
70 |
|
71 |
james was trying to emerge xorg-server-1.1.1-r1. Compiling failed with |
72 |
"Cannot write to '/usr/share/X11/xkb/compiled'". |
73 |
/usr/share/X11/xkb/compiled was a symlink to /var/lib/xkb, a non-existent |
74 |
file. |
75 |
|
76 |
Alan McKinnon noted that running "equery belongs /var/lib/xkb" on his |
77 |
system showed the file to have been installed by xkbcomp and suggested |
78 |
recompiling it. James reported problem solved. |
79 |
|
80 |
* http://thread.gmane.org/gmane.linux.gentoo.user/172393 |
81 |
|
82 |
gentoo-dev |
83 |
---------- |
84 |
|
85 |
vim syntax global use flag |
86 |
|
87 |
Caleb Cushing has suggested adding a vim-syntax global use flag to allow |
88 |
users to more easily manage vim syntax ebuilds. For example, such a use |
89 |
flag when set would make it so that when one installed x11-wm/fluxbox it |
90 |
would also install app-vim/fluxbox-syntax as a dependency. The idea met |
91 |
with positive reactions and Mike Kelly has opened a bug report[3] to track |
92 |
the progress of implementing this on the about 12 affected packages. |
93 |
|
94 |
3. http://bugs.gentoo.org/152275 |
95 |
|
96 |
* http://thread.gmane.org/gmane.linux.gentoo.devel/43442 |
97 |
|
98 |
support for i386 |
99 |
|
100 |
Mike Frysinger has brought to the attention of Gentoo developers that the |
101 |
i386 sub-architecture is facing a difficult future. Starting with |
102 |
glibc-2.6, upstream plans to require TLS and the i386 lacks the atomic |
103 |
instructions required to support it. Debate is being had as to what |
104 |
support, if any, Gentoo will be able to offer when this change occurs. |
105 |
While glibc-2.5 can continue to be used (which has relevance to Release |
106 |
Engineering which makes use of CHOST="i386-*" for its builds), once an |
107 |
exploit of glibc-2.5 comes along, it could spell the end of i386. |
108 |
|
109 |
* http://thread.gmane.org/gmane.linux.gentoo.devel/43417 |
110 |
|
111 |
========================= |
112 |
3. Gentoo developer moves |
113 |
========================= |
114 |
|
115 |
Moves |
116 |
----- |
117 |
|
118 |
The following developers recently left the Gentoo project: |
119 |
|
120 |
* Denis Dupeyron (calchan) |
121 |
|
122 |
Adds |
123 |
---- |
124 |
|
125 |
The following developers recently joined the Gentoo project: |
126 |
|
127 |
* Matti Bickel (mabi) PPC |
128 |
* Piotr Jaroszyński (peper) voip/mozilla |
129 |
* Jurek Bartuszek (jurek) dotnet |
130 |
|
131 |
Changes |
132 |
------- |
133 |
|
134 |
The following developers recently changed roles within the Gentoo project: |
135 |
|
136 |
* none this week |
137 |
|
138 |
================== |
139 |
4. Gentoo security |
140 |
================== |
141 |
|
142 |
Seamonkey: Multiple vulnerabilities |
143 |
----------------------------------- |
144 |
|
145 |
The Seamonkey project has reported multiple security vulnerabilities in |
146 |
the application. |
147 |
|
148 |
For more information, please see the GLSA Announcement[4] |
149 |
|
150 |
4. http://www.gentoo.org/security/en/glsa/glsa-200610-04.xml |
151 |
|
152 |
CAPI4Hylafax fax receiver: Execution of arbitrary code |
153 |
------------------------------------------------------ |
154 |
|
155 |
CAPI4Hylafax allows remote attackers to execute arbitrary commands. |
156 |
|
157 |
For more information, please see the GLSA Announcement[5] |
158 |
|
159 |
5. http://www.gentoo.org/security/en/glsa/glsa-200610-05.xml |
160 |
|
161 |
Mozilla Network Security Service (NSS): RSA signature forgery |
162 |
------------------------------------------------------------- |
163 |
|
164 |
NSS fails to properly validate PKCS #1 v1.5 signatures. |
165 |
|
166 |
For more information, please see the GLSA Announcement[6] |
167 |
|
168 |
6. http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml |
169 |
|
170 |
Python: Buffer Overflow |
171 |
----------------------- |
172 |
|
173 |
A buffer overflow in Python's "repr()" function can be exploited to cause |
174 |
a Denial of Service and potentially allows the execution of arbitrary |
175 |
code. |
176 |
|
177 |
For more information, please see the GLSA Announcement[7] |
178 |
|
179 |
7. http://www.gentoo.org/security/en/glsa/glsa-200610-07.xml |
180 |
|
181 |
Cscope: Multiple buffer overflows |
182 |
--------------------------------- |
183 |
|
184 |
Cscope is vulnerable to multiple buffer overflows that could lead to the |
185 |
execution of arbitrary code. |
186 |
|
187 |
For more information, please see the GLSA Announcement[8] |
188 |
|
189 |
8. http://www.gentoo.org/security/en/glsa/glsa-200610-08.xml |
190 |
|
191 |
libmusicbrainz: Multiple buffer overflows |
192 |
----------------------------------------- |
193 |
|
194 |
Multiple buffer overflows have been found in libmusicbrainz, which could |
195 |
lead to a Denial of Service or possibly the execution of arbitrary code. |
196 |
|
197 |
For more information, please see the GLSA Announcement[9] |
198 |
|
199 |
9. http://www.gentoo.org/security/en/glsa/glsa-200610-09.xml |
200 |
|
201 |
============================ |
202 |
5. Upcoming package removals |
203 |
============================ |
204 |
|
205 |
This is a list of packages that have been announced to be removed in the |
206 |
future. The package removals come from many locations, including the |
207 |
Treecleaners[10] and various developers. |
208 |
|
209 |
10. http://www.gentoo.org/proj/en/qa/treecleaners |
210 |
|
211 |
Last Rites: |
212 |
----------- |
213 |
|
214 |
Package: Removal date: Contact: net-misc/klapjack 15 Nov 06 Alberto |
215 |
Suárez López[11] sys-devel/odinmp 16 Nov 06 Olivier Crete[12] |
216 |
www-apps/issue-tracker 19 Nov 06 Renat Lumpau[13] www-apps/back-end 19 |
217 |
Nov 06 Renat Lumpau[14] app-editors/xwpe 19 Nov 06 Alec Warner[15] |
218 |
dev-ruby/rudl 20 Nov 06 Diego Pettenò[16] |
219 |
|
220 |
11. bass@g.o |
221 |
12. tester@××××××.ca |
222 |
13. rl03@g.o |
223 |
14. rl03@g.o |
224 |
15. antarus@g.o |
225 |
16. flameeyes@g.o |
226 |
|
227 |
=========== |
228 |
6. Bugzilla |
229 |
=========== |
230 |
|
231 |
Summary |
232 |
------- |
233 |
|
234 |
* Statistics |
235 |
* Closed bug ranking |
236 |
* New bug rankings |
237 |
|
238 |
Statistics |
239 |
---------- |
240 |
|
241 |
The Gentoo community uses Bugzilla (bugs.gentoo.org[17]) to record and |
242 |
track bugs, notifications, suggestions and other interactions with the |
243 |
development team. Between 15 October 2006 and 22 October 2006, activity on |
244 |
the site has resulted in: |
245 |
|
246 |
11. http://bugs.gentoo.org |
247 |
|
248 |
* 901 new bugs during this period |
249 |
* 546 bugs closed or resolved during this period |
250 |
* 26 previously closed bugs were reopened this period |
251 |
* 159 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this |
252 |
period |
253 |
* 167 bugs marked as duplicates during this period |
254 |
|
255 |
Of the 11121 currently open bugs: 33 are labeled 'blocker', 116 are |
256 |
labeled 'critical', and 494 are labeled 'major'. |
257 |
|
258 |
Closed bug rankings |
259 |
------------------- |
260 |
|
261 |
The developers and teams who have closed the most bugs during this period |
262 |
are: |
263 |
|
264 |
* AMD64 Project[18], with 31 closed bugs[19] |
265 |
* Gentoo Developer Relations Team[20], with 26 closed bugs[21] |
266 |
* Gentoo Games[22], with 22 closed bugs[23] |
267 |
* Default Assignee for Orphaned Packages[24], with 20 closed bugs[25] |
268 |
* Gentoo Linux Gnome Desktop Team[26], with 16 closed bugs[27] |
269 |
* Gentoo KDE team[28], with 15 closed bugs[29] |
270 |
* Portage team[30], with 13 closed bugs[31] |
271 |
* Gentoo Toolchain Maintainers[32], with 12 closed bugs[33] |
272 |
18. amd64@g.o |
273 |
19. |
274 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=amd64@g.o |
275 |
20. devrel@g.o |
276 |
21. |
277 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=devrel@g.o |
278 |
22. games@g.o |
279 |
23. |
280 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=games@g.o |
281 |
24. maintainer-needed@g.o |
282 |
25. |
283 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=maintainer-needed@g.o |
284 |
26. gnome@g.o |
285 |
27. |
286 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=gnome@g.o |
287 |
28. kde@g.o |
288 |
29. |
289 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=kde@g.o |
290 |
30. dev-portage@g.o |
291 |
31. |
292 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=dev-portage@g.o |
293 |
32. toolchain@g.o |
294 |
33. |
295 |
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=toolchain@g.o |
296 |
|
297 |
|
298 |
New bug rankings |
299 |
---------------- |
300 |
|
301 |
The developers and teams who have been assigned the most new bugs during |
302 |
this period are: |
303 |
|
304 |
* Default Assignee for Orphaned Packages[34], with 36 new bugs[35] |
305 |
* Default Assignee for New Packages[36], with 26 new bugs[37] |
306 |
* Python Gentoo Team[38], with 13 new bugs[39] |
307 |
* Perl Devs @ Gentoo[40], with 11 new bugs[41] |
308 |
* AMD64 Project[42], with 11 new bugs[43] |
309 |
* Java team[44], with 10 new bugs[45] |
310 |
* Gentoo Linux Gnome Desktop Team[46], with 10 new bugs[47] |
311 |
* Alpha Porters[48], with 10 new bugs[49] |
312 |
34. maintainer-needed@g.o |
313 |
35. |
314 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=maintainer-needed@g.o |
315 |
36. maintainer-wanted@g.o |
316 |
37. |
317 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=maintainer-wanted@g.o |
318 |
38. python@g.o |
319 |
39. |
320 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=python@g.o |
321 |
40. perl@g.o |
322 |
41. |
323 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=perl@g.o |
324 |
42. amd64@g.o |
325 |
43. |
326 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=amd64@g.o |
327 |
44. java@g.o |
328 |
45. |
329 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=java@g.o |
330 |
46. gnome@g.o |
331 |
47. |
332 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=gnome@g.o |
333 |
48. alpha@g.o |
334 |
49. |
335 |
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=alpha@g.o |
336 |
|
337 |
|
338 |
=============== |
339 |
7. GWN feedback |
340 |
=============== |
341 |
|
342 |
Please send us your feedback[50] and help make the GWN better. |
343 |
|
344 |
44. gwn-feedback@g.o |
345 |
|
346 |
=============================== |
347 |
8. GWN subscription information |
348 |
=============================== |
349 |
|
350 |
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to |
351 |
gentoo-gwn+subscribe@g.o. |
352 |
|
353 |
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to |
354 |
gentoo-gwn+unsubscribe@g.o from the e-mail address you are |
355 |
subscribed under. |
356 |
|
357 |
================== |
358 |
9. Other languages |
359 |
================== |
360 |
|
361 |
The Gentoo Weekly Newsletter is also available in the following languages: |
362 |
|
363 |
* Chinese (Simplified)[51] |
364 |
* Danish[52] |
365 |
* Dutch[53] |
366 |
* English[54] |
367 |
* German[55] |
368 |
* Greek[56] |
369 |
* French[57] |
370 |
* Korean[58] |
371 |
* Japanese[59] |
372 |
* Italian[60] |
373 |
* Polish[61] |
374 |
* Portuguese (Brazil)[62] |
375 |
* Portuguese (Portugal)[63] |
376 |
* Russian[64] |
377 |
* Slovak[65] |
378 |
* Spanish[66] |
379 |
51. http://www.gentoo.org/news/zh_cn/gwn/gwn.xml |
380 |
52. http://www.gentoo.org/news/da/gwn/gwn.xml |
381 |
53. http://www.gentoo.org/news/nl/gwn/gwn.xml |
382 |
54. http://www.gentoo.org/news/en/gwn/gwn.xml |
383 |
55. http://www.gentoo.org/news/de/gwn/gwn.xml |
384 |
56. http://www.gentoo.org/news/el/gwn/gwn.xml |
385 |
57. http://www.gentoo.org/news/fr/gwn/gwn.xml |
386 |
58. http://www.gentoo.org/news/ko/gwn/gwn.xml |
387 |
59. http://www.gentoo.org/news/ja/gwn/gwn.xml |
388 |
60. http://www.gentoo.org/news/it/gwn/gwn.xml |
389 |
61. http://www.gentoo.org/news/pl/gwn/gwn.xml |
390 |
62. http://www.gentoo.org/news/pt_br/gwn/gwn.xml |
391 |
63. http://www.gentoo.org/news/pt/gwn/gwn.xml |
392 |
64. http://www.gentoo.org/news/ru/gwn/gwn.xml |
393 |
65. http://www.gentoo.org/news/sk/gwn/gwn.xml |
394 |
66. http://www.gentoo.org/news/es/gwn/gwn.xml |
395 |
|
396 |
|
397 |
Ulrich Plate <plate@g.o> - Editor |
398 |
Chris Atkinson <thirtyyearswar@××××××××××.com> - Author |
399 |
Josh Saddler <nightmorph@g.o> - Author |
400 |
Kyle Bishop <phnix@××××××××.net> - Author |
401 |
Chris Gianelloni <wolf31o2@g.o> - Author |