Gentoo Weekly Newsletter 1 May 2006

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

Gentoo Weekly Newsletter 1 May 2006

Ulrich Plate
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of 1 May 2006.
1. Gentoo news
Gentoo participation in Google "Summer of Code"
The "Summer of Code"[1] program sponsored by Google has accepted Gentoo as
a mentoring organization. From today until early September, around 90
open-source projects will be working with students to implement
project-specific features. Participants are offered a financial reward for
their work. All interested students should refer to Google's Student
FAQ[2] to check whether they are eligible to participate in the Summer of
Code with Gentoo.

If you wish to contribute feel free to contact us, either through email[3]
or IRC (#gentoo-soc on Freenode). Some project ideas can be found on our
website[4], but we are also open for student proposals -- if in doubt just
ask us!

 3. [hidden email]
How to obtain meaningful backtraces
Diego Pettenò[5] has released a new Howto[6] that explains in great detail
how to generate useful debugging info with backtraces. The Howto describes
the needed steps with changing compiler flags and stripping with the new
splitdebug feature. A short intro to gdb, the GNU Debugger, and coredumps
as a post-mortem debugging tool give the interested reader all tools to
start their own work to either debug themselves or report meaningful
backtraces to developers.

 5. [hidden email]
 6. http://
User feedback helps brushing up ebuilds
Two months ago[7], the qmail herd[8] asked for comments on the current
state of their ebuilds and usage. While they have not yet taken advantage
of all of the suggestions that came from the discussions, the qmail herd
has already made some progress. They started by creating a new, cleaner
ebuild for netqmail[9], a version of qmail[10]. netqmail has additional
bug fixes and patches to help with compilation on modern systems. The
ebuild removes extraneous patches. The remaining patches can be controlled
by the user via USE flags. This change addresses the main criticism of the
old ebuild. The qmail herd looks forward to any of your comments, ideas,
or suggestions on their new netqmail ebuild.

 8. [hidden email]
2. Heard in the community
Gentoo: State of the Union
As it happens every now and then another thread discussing perceived and
real problems in Gentoo got started. In this thread topics like
recruitment, policies, why cvs is bad and some others are discussed.
 * Gentoo: State of the union [11]

SHA256 digest issues
A bug in pycrypto caused a lot of digest and Manifest files to be created
with bogus SHA256 hashes. The source of the problem has been fixed, users
of portage 2.1 may still run into occasional digest failures. Upgrading to
pycrypto 2.0.1-r5 is highly recommended.
 * SHA256 digest issues [12]
 * Packages with bad SHA256 hash[13]

3. Gentoo in the press
Computer Partner (26 April 2006, in German)
"Netcleanse" is the name of an anti-spam and anti-virus product by a
German company. The announcement[14] of its new version 2.0 scheduled to
start shipping on 2 May claims it's based on "a hardened version of
Gentoo". Maybe somebody would like to check the 30-day-trial and find out
what's under the hood?

4. Gentoo developer moves
The following developers recently left the Gentoo project:
 * None this week
The following developers recently joined the Gentoo project:
 * None this week
The following developers recently changed roles within the Gentoo project:
 * None this week
5. Gentoo Security
xine-ui: Format string vulnerabilities
Format string vulnerabilities in xine-ui may lead to the execution of
arbitrary code.
For more information, please see the GLSA Announcement[15]

xine-lib: Buffer overflow vulnerability
xine-lib contains a buffer overflow vulnerability which may lead to the
execution of arbitrary code.
For more information, please see the GLSA Announcement[16]

Ethereal: Multiple vulnerabilities in protocol dissectors
Ethereal is vulnerable to numerous vulnerabilities, potentially resulting
in the execution of arbitrary code.
For more information, please see the GLSA Announcement[17]

Mozilla Suite: Multiple vulnerabilities
Several vulnerabilities in Mozilla Suite allow attacks ranging from script
execution with elevated privileges to information leaks.
For more information, please see the GLSA Announcement[18]

6. Bugzilla
The Gentoo community uses Bugzilla ([19]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 23 April 2006 and 30 April 2006, activity on the
site has resulted in:

 * 819 new bugs during this period
 * 338 bugs closed or resolved during this period
 * 38 previously closed bugs were reopened this period
Of the 9907 currently open bugs: 61 are labeled 'blocker', 142 are labeled
'critical', and 524 are labeled 'major'.
Closed bug rankings
The developers and teams who have closed the most bugs during this period
 * Gentoo KDE team[20], with 16 closed bugs[21]  
 * Portage team[22], with 16 closed bugs[23]  
 * mips team[24], with 14 closed bugs[25]  
 * Gentoo Security[26], with 12 closed bugs[27]  
 * Gentoo Games[28], with 12 closed bugs[29]  
 * Gentoo Toolchain Maintainers[30], with 9 closed bugs[31]  
 * Printing Team[32], with 9 closed bugs[33]  
 * Mozilla Gentoo Team[34], with 9 closed bugs[35]  
 20. [hidden email]
 22. [hidden email]
 24. [hidden email]
 26. [hidden email]
 28. [hidden email]
 30. [hidden email]
 32. [hidden email]
 34. [hidden email]

New bug rankings
The developers and teams who have been assigned the most new bugs during
this period are:
 * Default Assignee for New Packages[36], with 31 new bugs[37]  
 * Gentoo Games[38], with 11 new bugs[39]  
 * Gentoo Sound Team[40], with 10 new bugs[41]  
 * media-video herd[42], with 9 new bugs[43]  
 * Gentoo Linux Gnome Desktop Team[44], with 8 new bugs[45]  
 * AMD64 Project[46], with 8 new bugs[47]  
 * Gentoo Kernel Bug Wranglers and Kernel Maintainers[48], with 7 new
 * Gentoo X-windows packagers[50], with 6 new bugs[51]  
 36. [hidden email]
 38. [hidden email]
 40. [hidden email]
 42. [hidden email]
 44. [hidden email]
 46. [hidden email]
 48. [hidden email]
 50. [hidden email]

7. GWN feedback
Please send us your feedback[52] and help make the GWN better.

 52. [hidden email]
8. GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
[hidden email].
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
[hidden email] from the e-mail address you are
subscribed under.
9. Other languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Danish[53]  
 * Dutch[54]  
 * English[55]  
 * German[56]  
 * French[57]  
 * Korean[58]  
 * Japanese[59]  
 * Italian[60]  
 * Polish[61]  
 * Portuguese (Brazil)[62]  
 * Portuguese (Portugal)[63]  
 * Russian[64]  
 * Spanish[65]  
 * Turkish[66]  

Ulrich Plate <[hidden email]> - Editor
Michael Hanselmann <[hidden email]> - Author
Patrick Lauer <[hidden email]> - Author
Marc Loeser <[hidden email]> - Author

[hidden email] mailing list