Gentoo Archives: gentoo-gwn

From: Kurt Lieber <klieber@g.o>
To: gentoo-gwn@g.o
Subject: [gentoo-gwn] Gentoo Weekly Newsletter -- Volume 2, Issue 9
Date: Mon, 03 Mar 2003 00:51:54
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of March 3rd, 2003.
1. Gentoo News

 * Gentoo Linux at the Game Developers Conference 
 * Open Developer Positions in the Gentoo Linux Project 
 * Gentoo Linux 1.4_rc3 Released 
Gentoo Linux at the Game Developers Conference
The 2003 Game Developers Conference[1] kicks off on Tuesday, March 4th. The GDC
is one of the world's premier conferences dedicated to the computer gaming
industry with several conference tracks focused on today's hot gaming topics.
One of the highlights of the conference is the GDC Expo where vendors and
exhibitors show off the latest and greatest software and hardware. This year,
Gentoo Linux will be present at the NVIDIA booth, along with Emmett Plant, CEO
of Vorbis[2]. Demonstrations of Unreal Tournament 2003 will be on display to
show the power of Gentoo Linux and NVIDIA hardware. 

So, if you're going to be at the GDC, be sure and stop by the NVIDIA booth 
to show your support for Gentoo Linux. You'll get a chance to meet Daniel 
Robbins, Seemant Kulleen and some of the other Gentoo Developers. 
Attendees may also get a chance to talk to Emmett Plant about the future 
of Ogg Vorbis, upcoming Ogg-capable portables or any number of other 
Ogg-related developments. 
Open Developer Positions in the Gentoo Linux Project
Currently, the Gentoo Linux project has a number of open developer 
positions available for people who are interested in becoming more 
involved with the Gentoo Linux project. These positions include: 
 * Technical Writer -- Help the documentation team maintain the high 
   quality of the Gentoo Linux documentation. We're looking for folks with an 
   aptitude for technical writing, along with an expert command of the 
   english language. 
 * Kernel Developer -- Help make gentoo-sources as feature-rich and robust 
   as possible. Bring your kernel hacking skills to the Gentoo Linux project 
   and help the current kernel development folks improve the quality of the 
   Gentoo Linux kernel offerings. 
 * Web Developer -- Gentoo Linux is looking for web developers with a 
   solid foundation in either Python, Perl or PHP to assist in the 
   development and improvement of the infrastructure that supports the Gentoo 
   Linux project. Help with projects like mailing list archives, mirror 
   status tools and other projects that improve the robustness and 
   reliability of our infrastructure. 

Think one of the positions listed above sounds interesting? Then help out 
by volunteering your time and skills to the Gentoo Linux project. 
Interested parties can contact Kurt Lieber[3] for more details. Please, no 
resumes. We're not that formal. :) Just include a brief description of 
your background and qualifications along with what type of position you're 
interested in helping out with. 

 3. klieber@g.o
Gentoo Linux 1.4_rc3 Released
The third and hopefully final Release Candidate of Gentoo Linux 1.4 was 
released on February 27th. Improvements to this release include updated 
LiveCDs and a whole raft of bug fixes. With this release, Gentoo Linux 
moves to a package updates phase as described in the official Gentoo Linux 
Release Policy[4]. For the next two weeks or so, developers will focus on 
migrating packages from a masked state to an unmasked, or stable, state. 
Users can expect long lists in their emerge -up world statements over the 
next couple of weeks as the backlog of masked packages is worked through. 

2. Gentoo Security

 * GLSA: usermin 
 * GLSA: apcupsd 
 * GLSA: vnc 
 * GLSA: tightvnc 
 * New Security Bug Reports 
GLSA: usermin
Usermin is subject to the same vulnerability reported last week for 
Webmin, in which a security hole could permit unauthenticated access. No 
exploits in the wild have been reported. 
 * Severity: Critical - Unauthenticated Access with Administrative 
 * Packages Affected: app-admin/usermin versions prior to usermin-1.000 
 * Rectification: Synchronize and emerge -u usermin, emerge clean. 
 * GLSA Announcement[5] 
 * Advisory[6] 

GLSA: apcupsd
The apcupsd daemon for controlling UPSs exposes a remote root access 
vulnerability and some buffer overflows. 
 * Severity: Critical - Remote Root Access 
 * Packages Affected: sys-apps/apcupsd versions prior to apcupsd-3.10.5 
 * Rectification: Synchronize and emerge -u apcupsd, emerge clean. 
 * GLSA Announcement[7] 
 * Advisory[8] 
GLSA: vnc
The VNC server generates a cookie for authentication in X using a weak 
random number generator. This could permit an attacker to more easily 
guess the authentication value and gain access to the system. No specific 
exploit is reported, but an exploitation technique involving rapid 
challenges and response comparison is described. 
 * Severity: Moderate to High - Encryption Compromise 
 * Packages Affected: net-misc/vnc versions prior to vnc-3.3.6-r1 
 * Rectification: Synchronize and emerge -u vnc, emerge clean. 
 * GLSA Announcement[9] 
 * Advisory[10] 

GLSA: tightvnc
TightVNC is subject to the same vulnerability as described above for VNC. 
 * Severity: Moderate to High - Encryption Compromise 
 * Packages Affected: net-misc/tightvnc versions prior to tightvnc-1.2.8 
 * Rectification: Synchronize and emerge -u tightvnc, emerge clean. 
 * GLSA Announcement[11] 
 * Advisory[12] 

New Security Bug Reports
The following new security bugs were posted this week: 
 * sys-apps/eject[13] 
 * x11-terms/eterm[14] 
 * sys-libs/zlib[15] 
 * net-analyzer/tcpdump[16] 

3. Featured Developer of the Week
José Alberto Suárez López
This week we feature José Alberto Suárez López[17], a native of Spain 
who got started working with Gentoo when he had a conversation with Daniel 
Robbins about having a Spanish side (e.g. documentation, translation) for 
Gentoo. Now the editor and coordinator for all things Spanish in Gentoo, 
he also participates in the app-games team and maintains several ebuilds. 
His most recent work was the integration of win4lin with Gentoo, and he's 
also working on some artwork. José is also quite involved with OSS 
outside of Gentoo: he helped translate Mozilla to Spanish, does some 
development, some artwork for OSS projects, and participates in some local 
LUGs, like HispaLiNUX[18] and ADALA[19]. His proudest achievements include 
the integration of Free Software into his school's computer network and 
the creation of a Gentoo Spanish group. 

 17. bass@g.o
José lives in Sevilla, the capital of Andalucia in the South of Spain, a 
sunny and enjoyable city that he says is full of beautiful girls, 
including the most beautiful girl in the world. He studies graphics design 
in the morning and spends his afternoons in a crazy office working on 
embedded systems running Linux and other cool stuff. José's hobbies 
include music (recently he went to a concert with Lou Donaldson and Lonei 
Smith that he really liked), reading books by Lovecraft, Tolkien, and 
others, sports, and traveling. In his room, alongside a HiFi sound system 
and a bunch of CDs is his one functional computer, a laptop, which he is 
migrating from GNOME to KDE for political reasons. He likes Sylpheed but 
uses Evolution for job reasons, links and Mozilla for browsing, BitchX and 
gaim for messaging, and couldn't live without bash and mc. 
4. Heard In The Community
Web Forums
1.4-rc3 out and about
Housekeeping in the forums is always a challenging job, but it gets really 
messy whenever a new release candidate is being put out in the open, and 
all the new kids come storming in leaving muddy traces all over the 
floor... Let's help the moderators by putting up a sign: Yes, 1.4-rc3 has 
been released. No, you can't upgrade from 1.4-rc2... How would you 
"upgrade" to anything that isn't already covered by your 'emerge rsync && 
emerge -u world' routines? If you want to help the developers, please go 
ahead and test the LiveCD images for the different platforms to see if 
they all work well for installations. Report your experiences, chat about 
the new release candidate, preferrably in the two top thread for x86 and 
the bottom one for PPC (notice the higher RC count, the Mac devs are 
riding a bit ahead): 
 * rc3 (in "Installing Gentoo")[20] 
 * 1.4_rc3 is out!!! (in "Gentoo Chat")[21] 
 * rc5?!?! (in "Gentoo on PPC")[22] 

Xfree 4.3.0
Equally eagerly awaited, the latest XFree86 upgrade has hit portage last 
week, only days after the ebuild for the release candidate was 
distributed. Greeted by a thread that grew to three pages within 24 hours, 
the buzz in the forums is generally positive with a few quips here and 
there, and hope that bugs in previous versions have been ironed out. Real 
nice work by the XFree86 developers, apparently. At the time of this 
writing you still need ACCEPT_KEYWORDS="~arch", but that'll change soon... 
 * XFree86 4.3 released![23] 
 * 4.3.0 Released (German language thread)[24] 
 * startx problem after xfree update[25] 
 * Xfree 4.3.0 & unreadable fonts in kde[26] 

Commercial Applications Ported to Linux? Why not?
Why would the developers of Windows software not be interested in support 
for their products on Linux? After all, it isn't all that complicated, 
provided they try to assure some compatibility with the Windows emulators 
available. Or, better still, why not try to lobby them into awareness of 
the growing market potential for Linux ports of their software? An 
initiative centered around this idea was born in the Forums two weeks ago, 
but has gained so much momentum that it's been spun off into a mailing 
list of its own. Matija Suklje (aka hook[27], the initiator of the forum 
thread) brought it up to speed with an article on Newsforge that even got 
translated into Swedish. If you want to help exploring the possibilities 
of Linux advocacy directly addressing the vendors of proprietary software 
and drivers, check the original thread, Matija's article and the LCSP list 
 * an organisation for linux games/apps advocacy?[28] 
 * How to bring more commercial applications to Linux[29] 
 * Swedish translation[30] 
 * lcsp - Linux Commercial Software Port Project[31] 


Gentoo releases and what they mean to you!
In an effort to stem the tide of "how to I upgrade to 1.4_rc3" questions, 
Gentoo Developer Troy Dack posted[32] a succinct message explaining 
exactly what Gentoo releases do (and, more importantly, don't) mean to 
you. The short version? emerge -u world. For the longer version, and to 
understand an issue that many users seem unaware of, read Troy's message.

Does gentoo compare?
Before slipping Gentoo the ring, Daniel Carerra asked[33] some important 
questions on how the distribution compares with the 'bigger' ones. How 
complete (# of packages) is it? How quickly do ebuilds follow new source 
releases? Is it as easy to update as apt-get? Can packages be created 
easily? Does Gentoo run faster? The unanimous 'yes' answers to his five 
questions made one thing clear; Gentoo is mature, and as of big of a 
player as any other. In short, Gentoo is rocksteady.. mon. 


USE FLAG for DJB's daemontools
Christian Wiese proposed[34] a new USE flag "to automatically build 
packages with daemontools[35] support if possible". Rajiv Aaron Manglani 
asked[36] whether the support for daemontools would mean the creation of a 
separate set of init scripts and David Pavlotzky finally contributed[37] 
with a pointer to an article[38] about daemontools. 

Where to install lisp sources in an ebuild?
Burton Samograd says[39] he is writing an ebuild for a package which is 
entirely written in lisp and I'm not quite sure where the source files 
should be installed to. He has received no answers so far! 

GCC Myths and Facts
Tom Eastman wrote a very elucidating article[40] with tips on the 
optimization switches of GCC. 

RFC for Gentoo GNU Emacs users
Matthew Kennedy announced[41] in a message to the list that he has made a 
modification to the way GNU Emacs is installed in Gentoo systems. This 
will allow for more possibilities in customizing Emacs. 

5. Gentoo International
Reminder: Vienna Meeting Tomorrow
Last chance to make yourself available for the Gentoo User Meeting in 
Vienna tomorrow, Tuesday, 4 March 2003, from 19:00 at the 
Siebensternbräu[42], Siebensterngasse 19 in 1070 Wien. Send a quick note 
to the Viennese coordination forum thread[43] before you drop by. 

Italian Gentoo Forum Established
Just hours after the publication of the last GWN edition, the Italian 
campaign was rewarded with the creation of an official Gentoo Forum in 
Italian.[44]. In all fairness, it is only second to initiator 
Enrico Morelli's Gentoo Italia Forum[45], preceding this one by about a 
month, but the official forum leverages on the huge crowd attracted by the 
English mainstream, and as a result is certainly more dynamic than 
Enrico's site at the University of Florence. Opening hours for both forums 
are fairly flexible, check in any time...

6. Portage Watch
The following stable packages were added to portage this week

 * app-text/gnu-gs-fonts-other : Ghostscript Extra Fonts 
 * app-text/gnu-gs-fonts-std : Ghostscript Standard Fonts 
 * net-analyzer/zodiac : DNS protocol analyzer 
 * sys-kernel/ppc-sources-benh : PowerPC kernel tree based on benh's 
   patches, -r corresponds to ben{r} versioning 
 * sys-kernel/mm-sources : Full sources for the development linux kernel 
   with Andrew Morton's patchset 
 * net-wireless/kismet : Kismet is a 802.11b wireless network sniffer. 
Updates to notable packages

 * sys-apps/portage - portage-2.0.47-r5.ebuild; portage-2.0.47-r6.ebuild; 
 * sys-devel/gcc - gcc-3.2.2-r1.ebuild;  
 * sys-libs/glibc - glibc-2.3.2_pre1.ebuild;  
 * x11-base/xfree - xfree-;  
 * sys-kernel/* - ac-sources-2.4.21_pre4-r5.ebuild; 
   ac-sources-2.4.21_pre4-r6.ebuild; ac-sources-2.4.21_pre4-r7.ebuild; 
   arm-headers-2.4.19.ebuild; arm-sources-2.4.19.ebuild; 
   development-sources-2.5.63.ebuild; mm-sources-2.5.60-r1.ebuild; 
   mm-sources-2.5.60-r2.ebuild; mm-sources-2.5.61-r1.ebuild; 
   mm-sources-2.5.62-r1.ebuild; mm-sources-2.5.62-r2.ebuild; 
   mm-sources-2.5.62-r3.ebuild; mm-sources-2.5.63-r1.ebuild; 
   ppc-sources-benh-2.4.20-r6.ebuild; redhat-sources-; 
 * net-www/apache - apache-1.3.27-r3.ebuild; apache-1.3.27-r4.ebuild;  
 * dev-php/php - php-4.3.1-r1.ebuild;  
 * app-admin/gentoolkit - gentoolkit-0.1.18-r2.ebuild; 
7. Bugzilla

 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
The Gentoo community uses Bugzilla ([46]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. In the last 7 days, activity on the site has resulted 
 * 252 new bugs this week 
 * 329 bugs closed or resolved this week 
 * 13 previously closed bugs were reopened this week. 
 * 1888 total bugs currently marked 'new' 
 * 539 total bugs curently assigned to developers 

There are currently 2487 bugs open in bugzilla. Of these: 59 are labelled 
'blocker', 84 are labelled 'critical', and 169 are labelled 'major'. 

Closed Bug Rankings
The developers and teams who have closed the most bugs this week are: 
 * Nicholas Jones[47], with 27 closed bugs[48] 
 * Mike Frysinger[49], with 16 closed bugs[50] 
 * The KDE Team[51], with 14 closed bugs[52] 
 * Martin Schlemmer[53], with 12 closed bugs[54] 
 * Donny Davies[55], with 12 closed bugs[56] 

 47. carpaski@g.o
 49. vapier@g.o
 51. kde@g.o
 53. azarah@g.o
 55. woodchip@g.o
New Bug Rankings
The developers and teams who have been assigned the most new bugs this 
week are: 
 * The PHP Team[57], with 32 new bugs[58] 
 * Jon Ellis[59], with 22 new bugs[60] 
 * Martin Schlemmer[61], with 19 new bugs[62] 
 * The PostgreSQL Team[63], with 19 new bugs[64] 
 * Nicholas Jones[65], with 16 new bugs[66] 

 57. php-bugs@g.o
 59. jje@g.o
 61. azarah@g.o
 63. pgsql-bugs@g.o
 65. carpaski@g.o
8. Tips and Tricks
Handling Files with Spaces
Many Gentoo users still favor command line tools (ls, find, etc.) over the 
newer GUI interfaces such as Nautilus or Konqueror. However, many command 
line users find that dealing with filenames that have spaces in them is 
difficult; especially when trying to automate a process or deal with 
multiple files at once. 
One common tool to deal with multipe files is xargs, which builds and 
executes commands from standard input. One example is using xargs to 
remove old files. 
| Code Listing 8.1:                                                       |
| Removing files older than one month                                     |
|                                                                         |
|# find . -type f -mtime +30 | xargs rm                                   |
|                                                                         |

Be careful when executing rm as you can quickly delete things you may 
not want deleted. find will also search recursively - you can use the 
-maxdepth option to control how deep it searches.  Normally this works 
pretty well. However, if there are spaces in the filenames, we run into 
problems. The spaces are interpreted as breaks so each word in the 
filename is interpreted as a new filename - which of course is not what 
you want. 
The solution to this is to use the --null (or -0) option which changes the 
spaces in the filenames to a NUL character. 
| Code Listing 8.1:                                                       |
| Using --null to correctly handle filenames with spaces                  |
|                                                                         |
|# find . -type f -mtime +30 -print0 | xargs --null rm                    |
|or                                                                       |
|# find . -type f -mtime +30 -print0 | xargs -0 rm                        |
|                                                                         |
Note that you also have to tell find to print with NUL characters 
instead of spaces, hence the -print0 option.    

9. Moves, Adds and Changes
The following developers recently left the Gentoo team: 
 * Bruce Locke (blocke) 
 * Tobias Echert (viz) 
The following developers recently joined the Gentoo Linux team: 
 * Dylan Carlson (absinthe) -- java and stuff 
The following developers recently changed roles within the Gentoo Linux 
 * Peter Brown (rendhalver) -- php 
 * Jared Hudson (jhhudso) -- php 
 * Masatomo Nakano (nakano) -- php, PostgreSQL 
 * Bryon Roche (kain) -- PostgreSQL 
 * Matthew Kennedy (mkennedy) -- PostgreSQL 
 * Kurt Lieber (klieber) -- Gentoo infrastructure 
10. Contribute to GWN
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 

 67. gwn-feedback@g.o
11. GWN Feedback
Please send us your feedback[68] and help make GWN better.

 68. gwn-feedback@g.o
12. Other Languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Dutch[68] 
 * English[68] 
 * German[68] 
 * French[68] 
 * Japanese[68] 
 * Italian[68] 
 * Portuguese (Brazil)[68] 
 * Portuguese (Portugal)[68] 
 * Spanish[68] 
Kurt Lieber <klieber@g.o> - Editor
AJ Armstrong <aja@×××××××××××××.com> - Contributor
Brice Burgess <nesta@×××××××.net> - Contributor
Yuji Carlos Kosugi <carlos@g.o> - Contributor
Rafael Cordones Marcos <rcm@×××××××.net> - Contributor
David Narayan <david@×××××××.net> - Contributor
Ulrich Plate <plate@g.o> - Contributor
Peter Sharp <mail@××××××××××××××.net> - Contributor
Mathy Vanvoorden <matje@×××××××.be> - Dutch Translation
Tom Van Laerhoven <tom.vanlaerhoven@××××××.be> - Dutch Translation
Roel Adriaans <roel@××××××××.cx> - Dutch Translation
Peter Dijkstra <phj.dijkstra@××××.nl> - Dutch Translation
Nicolas Ledez <nicolas.ledez@××××.fr> - French Translation
Guillaume Plessis <gui@×××××××××.com> - French Translation
Eric St-Georges <thevedge@××××××××.net> - French Translation
John Berry <anfini@××××.fr> - French Translation
Martin Prieto <riverdale@×××××××××.org> - French Translation
Michael Kohl <citizen428@g.o> - German Translation
Steffen Lassahn <madeagle@g.o> - German Translation
Matthias F. Brandstetter <haim@g.o> - German Translation
Thomas Raschbacher <lordvan@g.o> - German Translation
Marco Mascherpa <mush@××××××.net> - Italian Translation
Claudio Merloni <paper@×××××××.it> - Italian Translation
Daniel Ketel <kage-chan@g.o> - Japanese Translation
Yoshiaki Hagihara <hagi@×××.com> - Japanese Translation
Andy Hunne <andy@×××××××××.com> - Japanese Translation
Yuji Carlos Kosugi <carlos@g.o> - Japanese Translation
Yasunori Fukudome <yasunori@××××××××××××××××.uk> - Japanese Translation
Ventura Barbeiro <venturasbarbeiro@××××××.br> - Portuguese (Brazil) 
Bruno Ferreira <blueroom@××××××××××××.net> - Portuguese (Portugal) 
Gustavo Felisberto <gustavo@××××××××××.net> - Portuguese (Portugal) 
Ricardo Jorge Louro <rjlouro@×××××××.org> - Portuguese (Portugal) 
Lanark <lanark@××××××××××.ar> - Spanish Translation
Rafael Cordones Marcos <rcm@×××××××.net> - Spanish Translation
Julio Castillo <julio@×××××××××××××.com> - Spanish Translation
Sergio Gómez <s3r@××××××××××××.ar> - Spanish Translation
Pablo Pita Leira <pablo.leira@×××××××××.com> - Spanish Translation
Carlos Castillo <carlos@×××××××××××××.com> - Spanish Translation
Tirant <tirant@×××××.net> - Spanish Translation
Jaime Freire <jfreire@××.com> - Spanish Translation
Lucas Sallovitz <krusty_ar@×××××.com> - Spanish Translation