Gentoo Archives: gentoo-gwn

From: Ulrich Plate <plate@g.o>
To: gentoo-gwn@l.g.o
Subject: [gentoo-gwn] Gentoo Weekly Newsletter 24 October 2005
Date: Mon, 24 Oct 2005 10:34:26
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of 24 October 2005.
1. Gentoo news
Gentoo SGI LiveCD released
Joshua Kinard[1] released a bootable CD for Silicon Graphics machines, his 
fifth release candidate that builds on earlier efforts[2], and adds the 
SGI Origin (IP27) series to the list of supported hardware. This 
outstanding achievement -- other than IRIX installation media, this is the 
only bootable CD for SGI systems -- was largely built using Catalyst 2, 
the release engineering tool's next generation, and is again making use of 
Stanislaw Skowronek's ARCLoad bootloader and other tools. 
 1. kumba@g.o
Carefully check the instructions in Joshua's README[3] to the CD image 
that can be found in the experimental MIPS section of Gentoo's mirrors[4]. 
In particular, CDs need to be burnt with cdrecord to make sure the 
IRIX-like partitioned disk structure is preserved. 
Gentoo Linux/MIPS 2005.1 stages for Cobalt released
More good news for MIPS users, this one for owners of Cobalt Qubes and 
RaQs: Stuart Longland[5] announced that he finished building the stages 
for Gentoo Linux/MIPS 2005.1 installations on the popular little-endian 
appliances of the Cobalt Networks server series[6]. Netboot images will be 
made available later, the stages can already be downloaded from Stuart's 
devspace[7] before they hit the official Gentoo mirrors later this month. 
 5. redhatter@g.o
2. Heard in the community
Web forums
Openoffice 2.0 is out
Greeted by many Forums users, the stable version of OOo 2.0 has hit the 
Portage tree last week, mere hours after the official announcement. In the 
main thread, developer Andreas Proschofsky[8] explains the benefits of 
compiling the package (better KDE integration, Gentoo splashscreen) and 
clarifies that it will not build with Java 1.5: 
 8. suka@g.o
 * 2.0.0 final released[9]  
3. Gentoo in the press
Information Week (17 October 2005)
In an article titled Open doors to innovation[10], author Larry 
Greenemeier of Information Week reports on small and medium-sized 
companies "creating IT infrastructures based on open-source software to 
reduce licensing fees and increase flexibility." One of the examples 
featuring in his concise overview of the many good uses open-source 
software is being put to is a company called Feedster[11], a blog 
aggregator service in San Francisco where 60 out of 75 servers run Gentoo 
to do the job of "pumping out the RSS feeds." 
4. Tips and tricks
Rebuilding modules after a kernel upgrade
module-rebuild is a tool written by Gentoo developer John Mylchreest[12] 
that serves a very simple, but utterly useful purpose: Whenever you've 
upgraded your kernel to a newer version, this script hunts down all 
packages that use -- now outdated -- kernel modules and rebuilds them for 
 12. johnm@g.o
Suppose you've just booted into a freshly updated kernel. First of all, 
check which packages are using modules that haven't been built with the 
new sources yet: 
| Code Listing 4.1:                                                       |
| List packages                                                           |
|                                                                         |
|# module-rebuild list                                                    |
|                                                                         |
So, in case you've got any wireless drivers, exotic filesystems, anything 
else that relies on kernel modules, chances are you've just found them 
listed as a result of the above, and then you can rebuild them all by 
simply going: 
| Code Listing 4.2:                                                       |
| Rebuild all affected packages                                           |
|                                                                         |
|# module-rebuild rebuild                                                 |
|                                                                         |
Voila. Thanks to this little routine, you don't need to keep a mental list 
of things to do after a kernel update any longer. 
Note: Thanks to Forum user Sir No for unearthing this utility.
5. Moves, adds, and changes
The following developers recently left the Gentoo team: 
 * None this week 
The following developers recently joined the Gentoo Linux team: 
 * Luca Longinotti (chtekk) - Apache, webapps, PHP 
The following developers recently changed roles within the Gentoo Linux 
 * None this week 
6. Gentoo Security
Perl, Qt-UnixODBC, CMake: RUNPATH issues
Multiple packages suffer from RUNPATH issues that may allow users in the 
"portage" group to escalate privileges. 
For more information, please see the GLSA Announcement[13] 
Lynx: Buffer overflow in NNTP processing
Lynx contains a buffer overflow that may be exploited to execute arbitrary 
For more information, please see the GLSA Announcement[14] 
phpMyAdmin: Local file inclusion vulnerability
phpMyAdmin contains a local file inclusion vulnerability that may lead to 
the execution of arbitrary code. 
For more information, please see the GLSA Announcement[15] 
AbiWord: New RTF import buffer overflows
AbiWord is vulnerable to an additional set of buffer overflows during RTF 
import, making it vulnerable to the execution of arbitrary code. 
For more information, please see the GLSA Announcement[16] 
Netpbm: Buffer overflow in pnmtopng
The pnmtopng utility, part of the Netpbm tools, contains a vulnerability 
which can potentially result in the execution of arbitrary code. 
For more information, please see the GLSA Announcement[17] 
cURL: NTLM username stack overflow
cURL is vulnerable to a buffer overflow which could lead to the execution 
of arbitrary code. 
For more information, please see the GLSA Announcement[18] 
7. Bugzilla
 * Statistics 
 * Closed bug ranking 
 * New bug rankings 
The Gentoo community uses Bugzilla ([19]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 16 October 2005 and 23 October 2005, activity on 
the site has resulted in: 
 * 774 new bugs during this period 
 * 391 bugs closed or resolved during this period 
 * 22 previously closed bugs were reopened this period 
Of the 8753 currently open bugs: 108 are labeled 'blocker', 186 are 
labeled 'critical', and 562 are labeled 'major'. 
Closed bug rankings
The developers and teams who have closed the most bugs during this period 
 * Gentoo Sound Team[20], with 24 closed bugs[21]  
 * Gentoo KDE team[22], with 21 closed bugs[23]  
 * Portage team[24], with 18 closed bugs[25]  
 * Gentoo Games[26], with 17 closed bugs[27]  
 * Stefano Rossi[28], with 15 closed bugs[29]  
 * Gentoo Security[30], with 11 closed bugs[31]  
 * Jeremy Huddleston[32], with 10 closed bugs[33]  
 * Seemant Kulleen[34], with 9 closed bugs[35]  
 20. sound@g.o
 22. kde@g.o
 24. dev-portage@g.o
 26. games@g.o
 28. so@g.o
 30. security@g.o
 32. eradicator@g.o
 34. seemant@g.o
New bug rankings
The developers and teams who have been assigned the most new bugs during 
this period are: 
 * Default Assignee for New Packages[36], with 41 new bugs[37]  
 * AMD64 Porting Team[38], with 18 new bugs[39]  
 * Gentoo Sound Team[40], with 16 new bugs[41]  
 * Gentoo Linux Gnome Desktop Team[42], with 14 new bugs[43]  
 * Gentoo Games[44], with 11 new bugs[45]  
 * Gentoo Developer Relations Team[46], with 10 new bugs[47]  
 * X11 External Driver Maintainers[48], with 9 new bugs[49]  
 * Default Assignee for Orphaned Packages[50], with 9 new bugs[51]  
 36. maintainer-wanted@g.o
 38. amd64@g.o
 40. sound@g.o
 42. gnome@g.o
 44. games@g.o
 46. devrel@g.o
 48. x11-drivers@g.o
 50. maintainer-needed@g.o
8. GWN feedback
Please send us your feedback[52] and help make the GWN better. 
 52. gwn-feedback@g.o
9. GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn+unsubscribe@g.o from the email address you are 
subscribed under.
10. Other languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Danish[53]  
 * Dutch[54]  
 * English[55]  
 * German[56]  
 * French[57]  
 * Japanese[58]  
 * Italian[59]  
 * Polish[60]  
 * Portuguese (Brazil)[61]  
 * Portuguese (Portugal)[62]  
 * Russian[63]  
 * Spanish[64]  
 * Turkish[65]  
Ulrich Plate <plate@g.o> - Editor

gentoo-gwn@g.o mailing list