[gentoo-gwn] Gentoo Weekly Newsletter - Volume 3, Issue 31

[Yuji Kosugi]

---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of August 2nd, 2004.
---------------------------------------------------------------------------
 
==============
1. Gentoo News
==============
  
Gentoo Linux 2004.2 released
----------------------------
  
Today marks the release of Gentoo Linux 2004.2 for the AMD64, HPPA, SPARC 
and X86 architectures! 
 
The Gentoo Linux Release Engineering project has worked hard to improve 
key problem areas identified in the 2004.1 release. These areas of 
improvement include, but are not limited to:
 
 * LiveCD compatibility with Dell server-class machines 
 * LiveCD compatibility with SMP machines 
 * x86 laptop PCMCIA support 
 * Wireless (802.11a/b/g) capabilities 
 * SATA support 
 
Detailed information for Gentoo Linux 2004.2, such as Release Notes and 
md5sums, can be found at the  2004.2 information page[1] 

 1. /proj/en/releng/release/2004.2/2004.2.xml
 
Gentoo Linux 2004.2 can be downloaded from any one of our official 
download mirrors[2], as well as from our new BitTorrent system[3]. Please 
note that pentium3, pentium4, and athlon-xp PackageCDs are only available 
either by download via BitTorrent or through purchase at the Gentoo 
Store[4]. Additional GRP sets will be available via BitTorrent shortly.. 

 2. /main/en/mirrors.xml
 3. http://torrents.gentoo.org/torrents
 4. http://store.gentoo.org
    
First Anniversary of BugDay
---------------------------
  
It's now been a full year since the first Gentoo BugDay was organized by 
former developer Brian Jackson and held[5] on August 2, 2003, and users 
and developers joined forces for the first time in #gentoo-bugs on 
irc.freenode.net to close as many bugs as possible. It's been a good year 
for this new monthly initiative: an average of over 200 bugs has been 
closed each month, and many developers have joined the project as a result 
of the user-developer interaction that occurs. Users and developers alike 
are invited to come to #gentoo-bugs on Saturday, August 7th, the 
anniversary BugDay, continue the tradition, and maybe even break the 
record for closed bugs - the current record of 233 bugs closed was set on 
1 May 2004. For more information, contact Bryan Ostergaard[6], the current 
organiser. Good luck! 

 5. 
http://www.gentoo.org/news/en/gwn/20030804-newsletter.xml#doc_chap1_sect3
 6. kloeri@g.o
    
German GWN translation team seeking additional translators
----------------------------------------------------------
  
After a somehow turbulent time, Marc Herren[7] is taking over as lead for 
the German translation of the GWN. To expand the team we're searching for 
additional people who would like to volunteer and help out with 
translations. If you feel able to translate documents from English into 
German and have at least half an hour to spare each week, drop Marc a line 
to let him know you're interested. 

 7. dj-submerge@g.o
    
==================
2. Projects Update
==================
   
Desktop
 
The Desktop team have officially deprecated[8] the xfree package in favor 
of xorg-x11 as the default implementation of X for Gentoo. This reflects 
problems with the XFree license on version 4.4 that seem to preclude its 
inclusion in Portage. Both packages will remain in portage as people 
migrate, but xfree is expected to be dropped sometime early next year. 
Both Gnome 2.6.2 and KDE 3.2.3 have recently been marked stable in the 
tree, while XFCE 4.0.6 is in testing prior to stable release. 

 8. http://article.gmane.org/gmane.linux.gentoo.desktop/1271
 
A number of the Desktop sub-projects[9] have created new web pages to help 
users keep abreast of their activities, including the Science[10], 
Video[11] and Games[12] teams. 

 9. http://www.gentoo.org/proj/en/desktop/
 10. http://www.gentoo.org/proj/en/desktop/science/index.xml
 11. http://www.gentoo.org/proj/en/desktop/video/index.xml
 12. http://www.gentoo.org/proj/en/desktop/games/index.xml
 
Documentation
 
The Documentation Team is pleased to announce that Xavier Neys[13] has 
been named as Operational Lead for the Gentoo Documentation Project. In 
addition to updates to the Gentoo Handbook[14] to align with the 2004.2 
LiveCD release, the team has released several new documents, including a 
Home Router Guide[15] and Handbooks for ARM[16] and PPC64[17] 
architectures. There have also been updates to the Portage Guide, Kernel 
Guide and FAQ to reflect recent software changes, and the Desktop 
Configuration Guide has been replaced by new set of i>Gentoo Desktop 
Documentation Resources[18]. 

 13. neysx@g.o
 14. http://www.gentoo.org/doc/en/handbook/
 15. http://www.gentoo.org/doc/en/home-router-howto.xml
 16. http://www.gentoo.org/doc/en/handbook/handbook-arm.xml
 17. http://www.gentoo.org/doc/en/handbook/draft/handbook-ppc64.xml
 18. http://www.gentoo.org/doc/en/desktop.xml
 
Hardened
 
The Hardened Gentoo team made a parallel release of Security-Enabled 
(SELinux[19]) and PIE-SSP[20] stages and LiveCDs for the 2004.2 release. 

 19. http://www.gentoo.org/proj/en/hardened/selinux/index.xml
 20. http://www.gentoo.org/proj/en/hardened/pie-ssp.xml
    
==================
3. Gentoo Security
==================
  
Pavuk: Digest authentication helper buffer overflow
---------------------------------------------------
  
Pavuk contains a bug that can allow an attacker to run arbitrary code. 
 
For more information, please see the GLSA Announcement[21] 

 21. http://www.gentoo.org/security/en/glsa/glsa-200407-19.xml
    
Subversion: Vulnerability in mod_authz_svn
------------------------------------------
  
Users with write access to parts of a Subversion repository may bypass 
read restrictions in mod_authz_svn and read any part of the repository 
they wish. 
 
For more information, please see the GLSA Announcement[22] 

 22. http://www.gentoo.org/security/en/glsa/glsa-200407-20.xml
    
Samba: Multiple buffer overflows
--------------------------------
  
Two buffer overflows vulnerabilities were found in Samba, potentially 
allowing the remote execution of arbitrary code. 
 
For more information, please see the GLSA Announcement[23] 

 23. http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml
    
phpMyAdmin: Multiple vulnerabilities
------------------------------------
  
Multiple vulnerabilities in phpMyAdmin may allow a remote attacker with a 
valid user account to alter configuration variables and execute arbitrary 
PHP code. 
 
For more information, please see the GLSA Announcement[24] 

 24. http://www.gentoo.org/security/en/glsa/glsa-200407-22.xml
    
SoX: Multiple buffer overflows
------------------------------
  
SoX contains two buffer overflow vulnerabilities in the WAV header parser 
code. 
 
For more information, please see the GLSA Announcement[25] 

 25. http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml
    
MPlayer: GUI filename handling overflow
---------------------------------------
  
When compiled with GUI support MPlayer is vulnerable to a remotely 
exploitable buffer overflow attack. 
 
For more information, please see the GLSA Announcement[26] 

 26. http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml
    
=================================
4. Featured Developer of the Week
=================================
   
Featured Developer is on hiatus this week. 
    
=========================
5. Heard in the Community
=========================
  
gentoo-user
-----------
  
Transparent Squid Proxy Using IPTables
 
One list member had some issues getting Squid and IPTables to work happily 
together using the latest ebuilds. This thread[27] not only has a great 
example of an IPTables transparent proxy rule, but also some tips on 
getting the proper modules in place to use it! 

 27. http://thread.gmane.org/gmane.linux.gentoo.user/91554
 
"Weird" Executables in /bin
 
What's that left-bracket doing there in /bin? If you're curious, check out 
this thread[28]. 

 28. http://thread.gmane.org/gmane.linux.gentoo.user/91498
 
Upgrading Gentoo
 
Is it necessary to "upgrade" Gentoo when a new LiveCD comes out? With the 
recent release of 2004.2, one user wasn't sure[29]. Although the answer 
was given rather quickly, the thread grew large, and spawned discussions 
on effectively using Portage profiles, and more. 

 29. http://thread.gmane.org/gmane.linux.gentoo.user/91301
    
gentoo-security
---------------
  
Strange SSH Activity Making the Rounds
 
The gentoo-security list has had several users report odd SSH activity 
over the past few days. Symptoms include repeated failed logins by 
normally unused accounts, as well as a report by a user of the Debian list 
of an actual break-in. Check out more details here[30]. 

 30. http://thread.gmane.org/gmane.linux.gentoo.security/1466
   
=======================
6. Gentoo International
=======================
   
Gentoo International is on hiatus this week. 
    
===========
7. Bugzilla
===========
  
Summary
-------
  
 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
    
Statistics
----------
  
The Gentoo community uses Bugzilla (bugs.gentoo.org[31]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 24 July 2004 and 30 July 2004, activity on the 
site has resulted in: 

 31. http://bugs.gentoo.org
 
 * 716 new bugs during this period 
 * 370 bugs closed or resolved during this period 
 * 12 previously closed bugs were reopened this period 
 
Of the 7041 currently open bugs: 142 are labeled 'blocker', 197 are 
labeled 'critical', and 542 are labeled 'major'. 
    
Closed Bug Rankings
-------------------
  
The developers and teams who have closed the most bugs during this period 
are: 
 
 * AMD64 Porting Team[32], with 34 closed bugs[33]  
 * Net-Mail Packages[34], with 21 closed bugs[35]  
 * Java Team[36], with 17 closed bugs[37]  
 * Gentoo Genkernel Maintainers[38], with 17 closed bugs[39]  
 * Netmon Herd[40], with 16 closed bugs[41]  
 32. amd64@g.o
 33. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-24&chfieldto=2004-07-30&resolution=FIX
ED&assigned_to=amd64@g.o
 34. net-mail@g.o
 35. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-24&chfieldto=2004-07-30&resolution=FIX
ED&assigned_to=net-mail@g.o
 36. java@g.o
 37. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-24&chfieldto=2004-07-30&resolution=FIX
ED&assigned_to=java@g.o
 38. genkernel@g.o
 39. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-24&chfieldto=2004-07-30&resolution=FIX
ED&assigned_to=genkernel@g.o
 40. netmon@g.o
 41. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2004-07-24&chfieldto=2004-07-30&resolution=FIX
ED&assigned_to=netmon@g.o

New Bug Rankings
----------------
  
The developers and teams who have been assigned the most new bugs during 
this period are: 
 
 * AMD64 Porting Team[42], with 50 new bugs[43]  
 * OSX Porters[44], with 28 new bugs[45]  
 * Gentoo Linux Gnome Desktop Team[46], with 18 new bugs[47]  
 * Gentoo's Team for Core System Packages[48], with 14 new bugs[49]  
 * Chris White[50], with 12 new bugs[51]  
 42. amd64@g.o
 43. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-24&chfieldto=2004-07
-30&assigned_to=amd64@g.o
 44. osx@g.o
 45. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-24&chfieldto=2004-07
-30&assigned_to=osx@g.o
 46. gnome@g.o
 47. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-24&chfieldto=2004-07
-30&assigned_to=gnome@g.o
 48. base-system@g.o
 49. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-24&chfieldto=2004-07
-30&assigned_to=base-system@g.o
 50. chriswhite@g.o
 51. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2004-07-24&chfieldto=2004-07
-30&assigned_to=chriswhite@g.o
    
==================
8. Tips and Tricks
==================
   
Tips and Tricks is on hiatus this week.
    
===========================
9. Moves, Adds, and Changes
===========================
  
Moves
-----
  
The following developers recently left the Gentoo team:
 
 * None this week 
    
Adds
----
  
The following developers recently joined the Gentoo Linux team:
 
 * Renat Lumpau (rl03) - webapps 
 * Michael Kohl (citizen428) - ruby, cjk 
 * Rob Moss (robmoss) - grub, gcc porting 
 * Luca Mercuri (siggy) - infrastructure 
    
Changes
-------
  
The following developers recently changed roles within the Gentoo Linux 
project:
 
 * None this week 
    
=====================
10. Contribute to GWN
=====================
   
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 
email[52].

 52. gwn-feedback@g.o
    
================
11. GWN Feedback
================
   
Please send us your feedback[53] and help make the GWN better.

 53. gwn-feedback@g.o
    
================================
12. GWN Subscription Information
================================
   
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-subscribe@g.o.
 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-unsubscribe@g.o from the email address you are 
subscribed under.
    
===================
13. Other Languages
===================
   
The Gentoo Weekly Newsletter is also available in the following languages:
 
 * Danish[54] 
 * Dutch[55] 
 * English[56] 
 * German[57] 
 * French[58] 
 * Japanese[59] 
 * Italian[60] 
 * Polish[61] 
 * Portuguese (Brazil)[62] 
 * Portuguese (Portugal)[63] 
 * Russian[64] 
 * Spanish[65] 
 * Turkish[66] 
 54. http://www.gentoo.org/news/da/gwn/gwn.xml
 55. http://www.gentoo.org/news/be/gwn/gwn.xml
 56. http://www.gentoo.org/news/en/gwn/gwn.xml
 57. http://www.gentoo.org/news/de/gwn/gwn.xml
 58. http://www.gentoo.org/news/fr/gwn/gwn.xml
 59. http://www.gentoo.org/news/ja/gwn/gwn.xml
 60. http://www.gentoo.org/news/it/gwn/gwn.xml
 61. http://www.gentoo.org/news/pl/gwn/gwn.xml
 62. http://www.gentoo.org/news/br/gwn/gwn.xml
 63. http://www.gentoo.org/news/pt/gwn/gwn.xml
 64. http://www.gentoo.org/news/ru/gwn/gwn.xml
 65. http://www.gentoo.org/news/es/gwn/gwn.xml
 66. http://www.gentoo.org/news/tr/gwn/gwn.xml
   
Yuji Carlos Kosugi <carlos@g.o> - Editor
AJ Armstrong <aja@g.o> - Contributor
Brian Downey <bdowney@×××××××××××.net> - Contributor
Kurt Lieber <klieber@g.o> - Contributor
Ulrich Plate <plate@g.o> - Contributor
Sven Vermeulen <swift@g.o> - Contributor
Simon Holm Thagersen <simon@××××××.net> - Danish Translation
Jesper Brodersen <broeman@g.o> - Danish Translation
Arne Mejlholm <aaby@g.o> - Danish Translation
Hendrik Eeckhaut <Hendrik.Eeckhaut@×××××.be> - Dutch Translation
Jorn Eilander <sephiroth@××××××××.nl> - Dutch Translation
Bernard Kerckenaere <bernieke@××××××××.com> - Dutch Translation
Peter ter Borg <peter@××××××.nl> - Dutch Translation
Jochen Maes <linux@××××.be> - Dutch Translation
Roderick Goessen <rgoessen@××××.nl> - Dutch Translation
Gerard van den Berg <gerard@××××××.net> - Dutch Translation
Matthieu Montaudouin <mat@××××××××.com> - French Translation
Xavier Neys <neysx@g.o> - French Translation
Martin Prieto <riverdale@×××××××××.org> - French Translation
Antoine Raillon <cabec2@××××××.net> - French Translation
Sebastien Cevey <seb@×××××.net> - French Translation
Jean-Christophe Choisy <mabouya@××××××××××××.org> - French Translation
Thomas Raschbacher <lordvan@g.o> - German Translation
Steffen Lassahn <madeagle@g.o> - German Translation
Matthias F. Brandstetter <haim@g.o> - German Translation
Lukas Domagala <Cyrik@g.o> - German Translation
Tobias Scherbaum <dertobi123@g.o> - German Translation
Daniel Gerholdt <Sputnik1969@g.o> - German Translation
Marc Herren <dj-submerge@g.o> - German Translation
Tobias Matzat <SirSeoman@g.o> - German Translation
Marco Mascherpa <mush@××××××.net> - Italian Translation
Claudio Merloni <paper@×××××××.it> - Italian Translation
Stefano Lucidi <stefano.lucidi@×××××××××××××.org> - Italian Translation
Katuyuki Konno <katuyuki@××××××××.jp> - Japanese Translation
Hiroyuki Takeda <hiro@××××××××××××××.jp> - Japanese Translation
Masato Hatakeyama <hatake@×××××××××××.jp> - Japanese Translation
Shigehiro Idani <datam@×××××××.jp> - Japanese Translation
Masayoshi Nakamura <masayang@×××××××××.com> - Japanese Translation
Tomoyuki Sakurai <web-gentoo-doc-jp@××××××××××××.nu> - Japanese Translation
Lukasz Strzygowski <lucass@××××××.pl> - Polish Translation
Karol Goralski <gooroo@××××××.pl> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <bohlke@×××××××××.br> - Portuguese 
(Brazil) Translation
Eduardo Belloti <dudu@××××××××.net> - Portuguese (Brazil) Translation
Jo??o Rafael Moraes Nicola <joaoraf@×××××××××.br> - Portuguese (Brazil) 
Translation
Marcelo Gon??alves de Azambuja <mgazambuja@×××××××××.br> - Portuguese 
(Brazil) Translation
Otavio Rodolfo Piske <angusy@××××××××.org> - Portuguese (Brazil) 
Translation
Pablo N. Hess -- NatuNobilis <natunobilis@××××××××.org> - Portuguese 
(Brazil) Translation
Pedro de Medeiros <pzilla@××××××××.br> - Portuguese (Brazil) Translation
Ventura Barbeiro <venturasbarbeiro@××××××.br> - Portuguese (Brazil) 
Translation
Bruno Ferreira <blueroom@××××××××××××.net> - Portuguese (Portugal) 
Translation
Gustavo Felisberto <humpback@××××××××××.net> - Portuguese (Portugal) 
Translation
Jos?? Costa <jose_costa@×××××××.pt> - Portuguese (Portugal) Translation
Luis Medina <metalgodin@×××××××××.org> - Portuguese (Portugal) Translation
Ricardo Loureiro <rjlouro@×××××××.org> - Portuguese (Portugal) Translation
Aleksandr Martyncev <amncorp@××.ru> - Russian Translator
Sergey Galkin <gals_home@××××.ru> - Russian Translator
Sergey Kuleshov <svyatogor@g.o> - Russian Translator
Alex Spirin <asp13@××××.ru> - Russian Translator
Denis Zaletov <dzaletov@×××××××.ru> - Russian Translator
Guillermo Juarez <guillermo.juarez@××××××××××.es> - Spanish Translation
Fernando J. Pereda <ferdy@××××××.org> - Spanish Translation
Juan Diego Guti??rrez Gallardo <andy@××××××.com> - Spanish Translation
Nicolas Silva <nsilva@××××××.edu> - Spanish Translation
Aycan Irican <aycan@××××××××.tr> - Turkish Translation
Bugra Cakir <bugra@×××××××××.com> - Turkish Translation
Cagil Seker <cagils@××××××××××.tr> - Turkish Translation
Emre Kazdagli <emre@××××××××.tr> - Turkish Translation
Evrim Ulu <evrim@××××××××.tr> - Turkish Translation
Gursel Kaynak <gurcell@××××××××.tr> - Turkish Translation