Gentoo Weekly Newsletter 23 October 2006

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

Gentoo Weekly Newsletter 23 October 2006

Chris Gianelloni
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of 23 October 2006.
1. Gentoo news
Gentoo Linux certified on Sun Fire T1000/T2000
Gentoo Linux 2006.1 for SPARC is one of only two Linux distributions that
have been certified[1] by Sun to run on their Sun Fire Servers with
CoolThreads. These servers utilize the new UltraSPARC T1 processor. Sun
has worked with the Gentoo/SPARC team[2] to ensure support of their latest
servers in Gentoo Linux. Many thanks to Sun for also donating a Sun Fire
T2000 server for the Foundation to use to further development on

2. Heard in the community
Idea: Gentoo Automated Error Reporting/Resolution Client
ThinkingInBinary posted an idea for an automated error reporting system to
help out developers and users. The client would collect information after
a crash and submit it to the developers. Besides automatically collecting
data for the developers, the client could also give step-by-step
instructions to the user if the problem has already been resolved.
want to ditch kopete
Roy Wright couldn't get rid of kopete-3.5.5-r1. When he tried to delete
it, portage insisted on bringing it back and it prevented him from
updating world. As a workaround, Neil Bothwick proposed:
| Code Listing 2.1:                                                       |
|Adding kopete to package.provided                                        |
|                                                                         |
|# mkdir -p /etc/portage/profile                                          |
|# echo "kde-base/kopete-3.5.5-r1" >>/etc/portage/profile/package.provided|
|                                                                         |
Roy reported the problem solved, but wondered what he'd done. User bn
explained that he'd convinced portage that kopete was installed even
though it wasn't. Haarm Geerts pointed out that this was a workaround
rather than a solution and that it might come back to haunt Roy someday in
the future.

xorg-server update problem
james was trying to emerge xorg-server-1.1.1-r1. Compiling failed with
"Cannot write to '/usr/share/X11/xkb/compiled'".
/usr/share/X11/xkb/compiled was a symlink to /var/lib/xkb, a non-existent
Alan McKinnon noted that running "equery belongs /var/lib/xkb" on his
system showed the file to have been installed by xkbcomp and suggested
recompiling it. James reported problem solved.
vim syntax global use flag
Caleb Cushing has suggested adding a vim-syntax global use flag to allow
users to more easily manage vim syntax ebuilds. For example, such a use
flag when set would make it so that when one installed x11-wm/fluxbox it
would also install app-vim/fluxbox-syntax as a dependency. The idea met
with positive reactions and Mike Kelly has opened a bug report[3] to track
the progress of implementing this on the about 12 affected packages.


support for i386
Mike Frysinger has brought to the attention of Gentoo developers that the
i386 sub-architecture is facing a difficult future. Starting with
glibc-2.6, upstream plans to require TLS and the i386 lacks the atomic
instructions required to support it. Debate is being had as to what
support, if any, Gentoo will be able to offer when this change occurs.
While glibc-2.5 can continue to be used (which has relevance to Release
Engineering which makes use of CHOST="i386-*" for its builds), once an
exploit of glibc-2.5 comes along, it could spell the end of i386.
3. Gentoo developer moves
The following developers recently left the Gentoo project:
 * Denis Dupeyron (calchan)
The following developers recently joined the Gentoo project:
 * Matti Bickel (mabi) PPC
 * Piotr Jaroszyński (peper) voip/mozilla
 * Jurek Bartuszek (jurek) dotnet
The following developers recently changed roles within the Gentoo project:
 * none this week
4. Gentoo security
Seamonkey: Multiple vulnerabilities
The Seamonkey project has reported multiple security vulnerabilities in
the application.
For more information, please see the  GLSA Announcement[4]

CAPI4Hylafax fax receiver: Execution of arbitrary code
CAPI4Hylafax allows remote attackers to execute arbitrary commands.
For more information, please see the  GLSA Announcement[5]

Mozilla Network Security Service (NSS): RSA signature forgery
NSS fails to properly validate PKCS #1 v1.5 signatures.
For more information, please see the  GLSA Announcement[6]

Python: Buffer Overflow
A buffer overflow in Python's "repr()" function can be exploited to cause
a Denial of Service and potentially allows the execution of arbitrary
For more information, please see the  GLSA Announcement[7]

Cscope: Multiple buffer overflows
Cscope is vulnerable to multiple buffer overflows that could lead to the
execution of arbitrary code.
For more information, please see the  GLSA Announcement[8]

libmusicbrainz: Multiple buffer overflows
Multiple buffer overflows have been found in libmusicbrainz, which could
lead to a Denial of Service or possibly the execution of arbitrary code.
For more information, please see the  GLSA Announcement[9]

5. Upcoming package removals
This is a list of packages that have been announced to be removed in the
future. The package removals come from many locations, including the
Treecleaners[10] and various developers.

Last Rites:
 Package: Removal date: Contact:  net-misc/klapjack 15 Nov 06 Alberto
Suárez López[11]  sys-devel/odinmp 16 Nov 06 Olivier Crete[12]  
www-apps/issue-tracker 19 Nov 06 Renat Lumpau[13]  www-apps/back-end 19
Nov 06 Renat Lumpau[14]  app-editors/xwpe 19 Nov 06 Alec Warner[15]  
dev-ruby/rudl 20 Nov 06 Diego Pettenò[16]  

 11. [hidden email]
 12. [hidden email]
 13. [hidden email]
 14. [hidden email]
 15. [hidden email]
 16. [hidden email]
6. Bugzilla
 * Statistics
 * Closed bug ranking
 * New bug rankings
The Gentoo community uses Bugzilla ([17]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 15 October 2006 and 22 October 2006, activity on
the site has resulted in:

 * 901 new bugs during this period
 * 546 bugs closed or resolved during this period
 * 26 previously closed bugs were reopened this period
 * 167 bugs marked as duplicates during this period
Of the 11121 currently open bugs: 33 are labeled 'blocker', 116 are
labeled 'critical', and 494 are labeled 'major'.
Closed bug rankings
The developers and teams who have closed the most bugs during this period
 * AMD64 Project[18], with 31 closed bugs[19]  
 * Gentoo Developer Relations Team[20], with 26 closed bugs[21]  
 * Gentoo Games[22], with 22 closed bugs[23]  
 * Default Assignee for Orphaned Packages[24], with 20 closed bugs[25]  
 * Gentoo Linux Gnome Desktop Team[26], with 16 closed bugs[27]  
 * Gentoo KDE team[28], with 15 closed bugs[29]  
 * Portage team[30], with 13 closed bugs[31]  
 * Gentoo Toolchain Maintainers[32], with 12 closed bugs[33]  
 18. [hidden email]
 20. [hidden email]
 22. [hidden email]
 24. [hidden email]
 26. [hidden email]
 28. [hidden email]
 30. [hidden email]
 32. [hidden email]

New bug rankings
The developers and teams who have been assigned the most new bugs during
this period are:
 * Default Assignee for Orphaned Packages[34], with 36 new bugs[35]  
 * Default Assignee for New Packages[36], with 26 new bugs[37]  
 * Python Gentoo Team[38], with 13 new bugs[39]  
 * Perl Devs @ Gentoo[40], with 11 new bugs[41]  
 * AMD64 Project[42], with 11 new bugs[43]  
 * Java team[44], with 10 new bugs[45]  
 * Gentoo Linux Gnome Desktop Team[46], with 10 new bugs[47]  
 * Alpha Porters[48], with 10 new bugs[49]  
 34. [hidden email]
 36. [hidden email]
 38. [hidden email]
 40. [hidden email]
 42. [hidden email]
 44. [hidden email]
 46. [hidden email]
 48. [hidden email]

7. GWN feedback
Please send us your feedback[50] and help make the GWN better.

 44. [hidden email]
8. GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
[hidden email].
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
[hidden email] from the e-mail address you are
subscribed under.
9. Other languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Chinese (Simplified)[51]  
 * Danish[52]  
 * Dutch[53]  
 * English[54]  
 * German[55]  
 * Greek[56]  
 * French[57]  
 * Korean[58]  
 * Japanese[59]  
 * Italian[60]  
 * Polish[61]  
 * Portuguese (Brazil)[62]  
 * Portuguese (Portugal)[63]  
 * Russian[64]  
 * Slovak[65]  
 * Spanish[66]  

Ulrich Plate <[hidden email]> - Editor
Chris Atkinson <[hidden email]> - Author
Josh Saddler <[hidden email]> - Author
Kyle Bishop <[hidden email]> - Author
Chris Gianelloni <[hidden email]> - Author

signature.asc (196 bytes) Download Attachment