Gentoo Archives: gentoo-gwn

From: Yuji Kosugi <carlos@g.o>
To: gentoo-gwn@l.g.o
Subject: [gentoo-gwn] Gentoo Weekly Newsletter - Volume 3, Issue 31
Date: Tue, 03 Aug 2004 03:50:07
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of August 2nd, 2004.
1. Gentoo News
Gentoo Linux 2004.2 released
Today marks the release of Gentoo Linux 2004.2 for the AMD64, HPPA, SPARC 
and X86 architectures! 
The Gentoo Linux Release Engineering project has worked hard to improve 
key problem areas identified in the 2004.1 release. These areas of 
improvement include, but are not limited to:
 * LiveCD compatibility with Dell server-class machines 
 * LiveCD compatibility with SMP machines 
 * x86 laptop PCMCIA support 
 * Wireless (802.11a/b/g) capabilities 
 * SATA support 
Detailed information for Gentoo Linux 2004.2, such as Release Notes and 
md5sums, can be found at the  2004.2 information page[1] 

 1. /proj/en/releng/release/2004.2/2004.2.xml
Gentoo Linux 2004.2 can be downloaded from any one of our official 
download mirrors[2], as well as from our new BitTorrent system[3]. Please 
note that pentium3, pentium4, and athlon-xp PackageCDs are only available 
either by download via BitTorrent or through purchase at the Gentoo 
Store[4]. Additional GRP sets will be available via BitTorrent shortly.. 

 2. /main/en/mirrors.xml
First Anniversary of BugDay
It's now been a full year since the first Gentoo BugDay was organized by 
former developer Brian Jackson and held[5] on August 2, 2003, and users 
and developers joined forces for the first time in #gentoo-bugs on to close as many bugs as possible. It's been a good year 
for this new monthly initiative: an average of over 200 bugs has been 
closed each month, and many developers have joined the project as a result 
of the user-developer interaction that occurs. Users and developers alike 
are invited to come to #gentoo-bugs on Saturday, August 7th, the 
anniversary BugDay, continue the tradition, and maybe even break the 
record for closed bugs - the current record of 233 bugs closed was set on 
1 May 2004. For more information, contact Bryan Ostergaard[6], the current 
organiser. Good luck! 

 6. kloeri@g.o
German GWN translation team seeking additional translators
After a somehow turbulent time, Marc Herren[7] is taking over as lead for 
the German translation of the GWN. To expand the team we're searching for 
additional people who would like to volunteer and help out with 
translations. If you feel able to translate documents from English into 
German and have at least half an hour to spare each week, drop Marc a line 
to let him know you're interested. 

 7. dj-submerge@g.o
2. Projects Update
The Desktop team have officially deprecated[8] the xfree package in favor 
of xorg-x11 as the default implementation of X for Gentoo. This reflects 
problems with the XFree license on version 4.4 that seem to preclude its 
inclusion in Portage. Both packages will remain in portage as people 
migrate, but xfree is expected to be dropped sometime early next year. 
Both Gnome 2.6.2 and KDE 3.2.3 have recently been marked stable in the 
tree, while XFCE 4.0.6 is in testing prior to stable release. 

A number of the Desktop sub-projects[9] have created new web pages to help 
users keep abreast of their activities, including the Science[10], 
Video[11] and Games[12] teams. 

The Documentation Team is pleased to announce that Xavier Neys[13] has 
been named as Operational Lead for the Gentoo Documentation Project. In 
addition to updates to the Gentoo Handbook[14] to align with the 2004.2 
LiveCD release, the team has released several new documents, including a 
Home Router Guide[15] and Handbooks for ARM[16] and PPC64[17] 
architectures. There have also been updates to the Portage Guide, Kernel 
Guide and FAQ to reflect recent software changes, and the Desktop 
Configuration Guide has been replaced by new set of i>Gentoo Desktop 
Documentation Resources[18]. 

 13. neysx@g.o
The Hardened Gentoo team made a parallel release of Security-Enabled 
(SELinux[19]) and PIE-SSP[20] stages and LiveCDs for the 2004.2 release. 

3. Gentoo Security
Pavuk: Digest authentication helper buffer overflow
Pavuk contains a bug that can allow an attacker to run arbitrary code. 
For more information, please see the GLSA Announcement[21] 

Subversion: Vulnerability in mod_authz_svn
Users with write access to parts of a Subversion repository may bypass 
read restrictions in mod_authz_svn and read any part of the repository 
they wish. 
For more information, please see the GLSA Announcement[22] 

Samba: Multiple buffer overflows
Two buffer overflows vulnerabilities were found in Samba, potentially 
allowing the remote execution of arbitrary code. 
For more information, please see the GLSA Announcement[23] 

phpMyAdmin: Multiple vulnerabilities
Multiple vulnerabilities in phpMyAdmin may allow a remote attacker with a 
valid user account to alter configuration variables and execute arbitrary 
PHP code. 
For more information, please see the GLSA Announcement[24] 

SoX: Multiple buffer overflows
SoX contains two buffer overflow vulnerabilities in the WAV header parser 
For more information, please see the GLSA Announcement[25] 

MPlayer: GUI filename handling overflow
When compiled with GUI support MPlayer is vulnerable to a remotely 
exploitable buffer overflow attack. 
For more information, please see the GLSA Announcement[26] 

4. Featured Developer of the Week
Featured Developer is on hiatus this week. 
5. Heard in the Community
Transparent Squid Proxy Using IPTables
One list member had some issues getting Squid and IPTables to work happily 
together using the latest ebuilds. This thread[27] not only has a great 
example of an IPTables transparent proxy rule, but also some tips on 
getting the proper modules in place to use it! 

"Weird" Executables in /bin
What's that left-bracket doing there in /bin? If you're curious, check out 
this thread[28]. 

Upgrading Gentoo
Is it necessary to "upgrade" Gentoo when a new LiveCD comes out? With the 
recent release of 2004.2, one user wasn't sure[29]. Although the answer 
was given rather quickly, the thread grew large, and spawned discussions 
on effectively using Portage profiles, and more. 

Strange SSH Activity Making the Rounds
The gentoo-security list has had several users report odd SSH activity 
over the past few days. Symptoms include repeated failed logins by 
normally unused accounts, as well as a report by a user of the Debian list 
of an actual break-in. Check out more details here[30]. 

6. Gentoo International
Gentoo International is on hiatus this week. 
7. Bugzilla
 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
The Gentoo community uses Bugzilla ([31]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 24 July 2004 and 30 July 2004, activity on the 
site has resulted in: 

 * 716 new bugs during this period 
 * 370 bugs closed or resolved during this period 
 * 12 previously closed bugs were reopened this period 
Of the 7041 currently open bugs: 142 are labeled 'blocker', 197 are 
labeled 'critical', and 542 are labeled 'major'. 
Closed Bug Rankings
The developers and teams who have closed the most bugs during this period 
 * AMD64 Porting Team[32], with 34 closed bugs[33]  
 * Net-Mail Packages[34], with 21 closed bugs[35]  
 * Java Team[36], with 17 closed bugs[37]  
 * Gentoo Genkernel Maintainers[38], with 17 closed bugs[39]  
 * Netmon Herd[40], with 16 closed bugs[41]  
 32. amd64@g.o
 34. net-mail@g.o
 36. java@g.o
 38. genkernel@g.o
 40. netmon@g.o

New Bug Rankings
The developers and teams who have been assigned the most new bugs during 
this period are: 
 * AMD64 Porting Team[42], with 50 new bugs[43]  
 * OSX Porters[44], with 28 new bugs[45]  
 * Gentoo Linux Gnome Desktop Team[46], with 18 new bugs[47]  
 * Gentoo's Team for Core System Packages[48], with 14 new bugs[49]  
 * Chris White[50], with 12 new bugs[51]  
 42. amd64@g.o
 44. osx@g.o
 46. gnome@g.o
 48. base-system@g.o
 50. chriswhite@g.o
8. Tips and Tricks
Tips and Tricks is on hiatus this week.
9. Moves, Adds, and Changes
The following developers recently left the Gentoo team:
 * None this week 
The following developers recently joined the Gentoo Linux team:
 * Renat Lumpau (rl03) - webapps 
 * Michael Kohl (citizen428) - ruby, cjk 
 * Rob Moss (robmoss) - grub, gcc porting 
 * Luca Mercuri (siggy) - infrastructure 
The following developers recently changed roles within the Gentoo Linux 
 * None this week 
10. Contribute to GWN
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 

 52. gwn-feedback@g.o
11. GWN Feedback
Please send us your feedback[53] and help make the GWN better.

 53. gwn-feedback@g.o
12. GWN Subscription Information
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-unsubscribe@g.o from the email address you are 
subscribed under.
13. Other Languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Danish[54] 
 * Dutch[55] 
 * English[56] 
 * German[57] 
 * French[58] 
 * Japanese[59] 
 * Italian[60] 
 * Polish[61] 
 * Portuguese (Brazil)[62] 
 * Portuguese (Portugal)[63] 
 * Russian[64] 
 * Spanish[65] 
 * Turkish[66] 
Yuji Carlos Kosugi <carlos@g.o> - Editor
AJ Armstrong <aja@g.o> - Contributor
Brian Downey <bdowney@×××××××××××.net> - Contributor
Kurt Lieber <klieber@g.o> - Contributor
Ulrich Plate <plate@g.o> - Contributor
Sven Vermeulen <swift@g.o> - Contributor
Simon Holm Thagersen <simon@××××××.net> - Danish Translation
Jesper Brodersen <broeman@g.o> - Danish Translation
Arne Mejlholm <aaby@g.o> - Danish Translation
Hendrik Eeckhaut <Hendrik.Eeckhaut@×××××.be> - Dutch Translation
Jorn Eilander <sephiroth@××××××××.nl> - Dutch Translation
Bernard Kerckenaere <bernieke@××××××××.com> - Dutch Translation
Peter ter Borg <peter@××××××.nl> - Dutch Translation
Jochen Maes <linux@××××.be> - Dutch Translation
Roderick Goessen <rgoessen@××××.nl> - Dutch Translation
Gerard van den Berg <gerard@××××××.net> - Dutch Translation
Matthieu Montaudouin <mat@××××××××.com> - French Translation
Xavier Neys <neysx@g.o> - French Translation
Martin Prieto <riverdale@×××××××××.org> - French Translation
Antoine Raillon <cabec2@××××××.net> - French Translation
Sebastien Cevey <seb@×××××.net> - French Translation
Jean-Christophe Choisy <mabouya@××××××××××××.org> - French Translation
Thomas Raschbacher <lordvan@g.o> - German Translation
Steffen Lassahn <madeagle@g.o> - German Translation
Matthias F. Brandstetter <haim@g.o> - German Translation
Lukas Domagala <Cyrik@g.o> - German Translation
Tobias Scherbaum <dertobi123@g.o> - German Translation
Daniel Gerholdt <Sputnik1969@g.o> - German Translation
Marc Herren <dj-submerge@g.o> - German Translation
Tobias Matzat <SirSeoman@g.o> - German Translation
Marco Mascherpa <mush@××××××.net> - Italian Translation
Claudio Merloni <paper@×××××××.it> - Italian Translation
Stefano Lucidi <stefano.lucidi@×××××××××××××.org> - Italian Translation
Katuyuki Konno <katuyuki@××××××××.jp> - Japanese Translation
Hiroyuki Takeda <hiro@××××××××××××××.jp> - Japanese Translation
Masato Hatakeyama <hatake@×××××××××××.jp> - Japanese Translation
Shigehiro Idani <datam@×××××××.jp> - Japanese Translation
Masayoshi Nakamura <masayang@×××××××××.com> - Japanese Translation
Tomoyuki Sakurai <web-gentoo-doc-jp@××××××××××××.nu> - Japanese Translation
Lukasz Strzygowski <lucass@××××××.pl> - Polish Translation
Karol Goralski <gooroo@××××××.pl> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <bohlke@×××××××××.br> - Portuguese 
(Brazil) Translation
Eduardo Belloti <dudu@××××××××.net> - Portuguese (Brazil) Translation
Jo??o Rafael Moraes Nicola <joaoraf@×××××××××.br> - Portuguese (Brazil) 
Marcelo Gon??alves de Azambuja <mgazambuja@×××××××××.br> - Portuguese 
(Brazil) Translation
Otavio Rodolfo Piske <angusy@××××××××.org> - Portuguese (Brazil) 
Pablo N. Hess -- NatuNobilis <natunobilis@××××××××.org> - Portuguese 
(Brazil) Translation
Pedro de Medeiros <pzilla@××××××××.br> - Portuguese (Brazil) Translation
Ventura Barbeiro <venturasbarbeiro@××××××.br> - Portuguese (Brazil) 
Bruno Ferreira <blueroom@××××××××××××.net> - Portuguese (Portugal) 
Gustavo Felisberto <humpback@××××××××××.net> - Portuguese (Portugal) 
Jos?? Costa <jose_costa@×××××××.pt> - Portuguese (Portugal) Translation
Luis Medina <metalgodin@×××××××××.org> - Portuguese (Portugal) Translation
Ricardo Loureiro <rjlouro@×××××××.org> - Portuguese (Portugal) Translation
Aleksandr Martyncev <amncorp@××.ru> - Russian Translator
Sergey Galkin <gals_home@××××.ru> - Russian Translator
Sergey Kuleshov <svyatogor@g.o> - Russian Translator
Alex Spirin <asp13@××××.ru> - Russian Translator
Denis Zaletov <dzaletov@×××××××.ru> - Russian Translator
Guillermo Juarez <guillermo.juarez@××××××××××.es> - Spanish Translation
Fernando J. Pereda <ferdy@××××××.org> - Spanish Translation
Juan Diego Guti??rrez Gallardo <andy@××××××.com> - Spanish Translation
Nicolas Silva <nsilva@××××××.edu> - Spanish Translation
Aycan Irican <aycan@××××××××.tr> - Turkish Translation
Bugra Cakir <bugra@×××××××××.com> - Turkish Translation
Cagil Seker <cagils@××××××××××.tr> - Turkish Translation
Emre Kazdagli <emre@××××××××.tr> - Turkish Translation
Evrim Ulu <evrim@××××××××.tr> - Turkish Translation
Gursel Kaynak <gurcell@××××××××.tr> - Turkish Translation