Gentoo Weekly Newsletter 5 March 2007

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

Gentoo Weekly Newsletter 5 March 2007

Chris Gianelloni
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of 5 March 2007.

1. Gentoo News

Opengear donates two CM4008

Opengear[1] has shown its generous side to Gentoo once again. Last year,
Opengear donated two CM4008 console servers[2] and followed up with yet
another CM4008 this year. If you're not familiar, these console servers
provide secure access to serial and network consoles, allowing
infrastructure to monitor and control servers and switches remotely, from
anywhere and at any time. These have been a great resource for
infrastructure[3] and the developer community. Thank you for your donations


New Gentoo Project: Xfce

Gentoo's Xfce project[4] gained it's official Gentoo project status, thanks
to Joshua Saddler[5] and Joshua Nichols[6]. What's coming up next for the
Xfce Project? There is an open stabilization bug[7] for the Xfce Desktop
Environment 4.4.0 and architecture team sign off on a list of stabilization
and keyword bugs.

   5. [hidden email]
   6. [hidden email]

2. Developer of the Week

"I sacrifice my x86 hardware on the altar of source-built distros!" - Joshua
Saddler, nightmorph

Figure 2.1: Joshua Saddler, aka nightmorph

Joshua Saddler, also known as nightmorph, is this week's featured developer.
He is 24 years old and resides in San Diego, CA, which is in the South-West
of the US, next to the Mexican border. Josh lives with his wife Melanie;
they celebrate eight months of marriage - congrats!

In 2005, Josh graduated college with a degree in theater. He has always been
into art, theater, and music classes; so much so that he's been playing the
piano for 16 years.

In his free time, Josh likes to read, write, listen to music and browse the
local bookshops. Josh's love of literature is obvious. He currently works as
a librarian and worked in a bookshop prior to that. Though he's shy to admit
it, Joshua's poetry has been published. When he's reading, which is whenever
he can find time, it will probably be a fantasy novel. His favorite authors
are Timothy Zahn, David Weber, and J.R.R. Tolkien. Josh likes
chill/world/ethereal music, though he enjoys a wide range of music types,
which goes from jazz to rock, even to classical. Like any good developer, he
also enjoys relaxing with a good online fragfest: UT2004 on his AMD64!

Josh started using Linux after seeing a friend using Linspire. After a lot
of research, he found his favorite Linux flavor: Gentoo. Some time later,
after wondering how he could give back to Gentoo, he decided to help with
the Gentoo Documentation Project[8], since he isn't into programming. Josh
joined the documentation team and contributes documentation for other
projects in need. His documentation skills have been put to good use for
various teams, including the newly formed Xfce project. Josh reflects on the
last two years of being a developer from his being mentored by Shyam Mani[9]
to his recent contributions on his blog post[10].

   9. [hidden email]

When Josh's AMD64 workstation boots, he opts for a GNOME session and the
following applications: gnome-terminal, audacious, Firefox, Thunderbird,
gvim, irssi, mplayer for movies and k3b for writing discs. Also of
noteworthy mention is his laptop, a vintage 2001 Toshiba that has burned out
two hard drives, various sticks of ram, and even a memory slot whilst
compiling Gentoo over the last few years!

3. Gentoo International

Belgium: Free Open Source Software Developers European Meeting, Brussels

If you weren't one of the fifty plus Gentoo developers that came to FOSDEM
this year, here's what you missed out on! FOSDEM'ers met up Friday evening
at Le Roy d'Espagne, on the Grand Place for a traditional pre-FOSDEM beer.
Did I mention the FOSDEM tab exceeded 5,000 Euro? Gentoo developers, users,
and a few admirers enjoyed an elegant dinner at Restaurant Roma Saturday
evening. In typical developer fashion, the elegant dinner was followed up by
a round of good old fashioned Brussels bar hopping.

How about the event itself? The Gentoo booth boasted a handsome display of
developer boxes to include a HPPA C3600 and several EFIKA setups - touch
screens, gaming boxes, and more. Gentoo talks, talks, and more talks. Some
might say the devroom talks were the hit of the Gentoo presence. The chairs
were not only full for every Gentoo talk, but virtually every talk left
little to no standing room. While FOSDEM 2007 was definitely a success, the
Gentoo Events project is already working on ways to make it bigger and
better in 2008 - hope to see you there!

Figure 3.1: Gentoo developers at the devroom at FOSDEM

Want to read more or check out some FOSDEM pics... check out the developer
impressions at Planet.

  * photo album 1[12]
  * photo album 2[13]
  * photo album 3[14]


Germany: Chemnitzer Linux-Tage, Chemnitz

The third year in a row, Gentoo Linux presented a booth at the Linux-Tage in
Chemnitz, Germany. On March 3rd and 4th, developers Wernfried Haas[15],
Hanno Boeck[16] and Robert Buchholz[17], former developer Jan Seidel (tuxus)
and Mr. Big had the opportunity to chat with users and discuss the
distribution, as well as see beyond their own noses by visiting the close-by
Debian, Ubuntu or Fedora booths. Besides getting stickers and case badges,
some of the 2700 visitors of the "Linux days" could see a Gentoo
cross-compile installation[18] on MIPS and installations on a ppc-iBook and
on a x86-notebook.

  15. [hidden email]
  17. [hidden email]

Figure 3.1: Embedded Foo -- Gentoo on a MIPS Wireless Storage device

Gentoo was also featured with an introductory talk by Wernfried Haas[15]
called The Gentoo Metadistribution[19] (slides in German).

  15. [hidden email]

Figure 3.2: Left to right: Bernd Wurst, DasTier, rbu and amne

Copenhagen, Linuxforum 07, Denmark

The annual Linuxforum event[20], held in Copenhagen, is one of the largest
events in Northern Europe. This year's venue received over 2,900 visitors!
The Gentoo booth was covered by developers: Stefan Cornelius[21], Sune
Kloppenborg[22], Thilo Bangert[23] and Alexander Færøy[24]. Alexander gave a
speech on Gentoo, making strong points about choice, compiling by source,
and why Gentoo has such a great community.

  21. [hidden email]
  22. [hidden email]
  23. [hidden email]
  24. [hidden email]



4. Gentoo developer moves


The following developers recently left the Gentoo project:

  * Luis Medinas (metalgod)
  * Sandro Bonazzola (sanchan)
  * Daniel Robbins (drobbins)


The following developers recently joined the Gentoo project:

  * Daniel Robbins (drobbins) AMD64 team
  * Matt Drew (aetius) Security team


The following developers recently changed roles within the Gentoo project:

  * Roy Marples (UberLord) Gentoo/FreeBSD co-lead
  * Timothy Redaelli (Drizzt) Gentoo/FreeBSD co-lead

5. Gentoo security

MPlayer: Buffer overflow

A buffer overflow was found in MPlayer's RTSP plugin that could lead to a
Denial of Service or arbitrary code execution.

For more information, please see the GLSA Announcement[25]


CHMlib: User-assisted remote execution of arbitrary code

A memory corruption vulnerability in CHMlib could lead to the remote
execution of arbitrary code.

For more information, please see the GLSA Announcement[26]


Snort: Remote execution of arbitrary code

The Snort DCE/RPC preprocessor contains a buffer overflow that could result
in the remote execution of arbitrary code.

For more information, please see the GLSA Announcement[27]


SpamAssassin: Long URI Denial of Service

SpamAssassin is vulnerable to a Denial of Service attack.

For more information, please see the GLSA Announcement[28]


ClamAV: Denial of Service

ClamAV contains two vulnerabilities allowing a Denial of Service.

For more information, please see the GLSA Announcement[29]


Mozilla Firefox: Multiple vulnerabilities

Multiple vulnerabilities have been reported in Mozilla Firefox, some of
which may allow user-assisted arbitrary remote code execution.

For more information, please see the GLSA Announcement[30]


Mozilla Suite: Multiple vulnerabilities

Several vulnerabilities exist in the Mozilla Suite, which is no longer
supported by the Mozilla project.

For more information, please see the GLSA Announcement[31]


AMD64 x86 emulation Qt library: Integer overflow

The AMD64 x86 emulation Qt library makes use of an insecure version of the
Qt library, potentially allowing for the remote execution of arbitrary code.

For more information, please see the GLSA Announcement[32]


6. Gentoo package moves

This section lists packages that have either been moved or added to the tree
and packages that have had their "last rites" announcement given to be
removed in the future. The package removals come from many locations,
including the Treecleaners[33] and various developers. Most packages which
are listed under the Last Rites section are in need of some love and care
and can remain in the tree if proper maintainership is established.



Package:                     Removal date: Contact:
sys-devel/gcc-compat         26 Feb 2007   Mike Frysinger[34]
net-misc/nxserver-business   26 Feb 2007   Stefan Schweizer[35]
net-misc/nxserver-enterprise 26 Feb 2007   Stefan Schweizer[35]
net-misc/nxserver-personal   26 Feb 2007   Stefan Schweizer[35]
app-admin/livecd-ng          27 Feb 2007   Chris Gianelloni[36]
app-cdr/gcombust             28 Feb 2007   Lars Weiler[37]
sys-devel/gcc-hppa64         28 Feb 2007   Guy Martin[38]
kde-base/unsermake           28 Feb 2007   Caleb Tennis[39]
net-misc/djmount             01 Mar 2007   Doug Goldstein[40]
dev-embedded/gpsim-logic     01 Mar 2007   Denis Dupeyron[41]
dev-embedded/gpsim-led       01 Mar 2007   Denis Dupeyron[41]
mail-client/ximian-connector 02 Mar 2007   Daniel Gryniewicz[42]
net-misc/yasuc               02 Mar 2007   Krzysiek Pawlik[43]
media-sound/choad            03 Mar 2007   Olivier Crete[44]
media-sound/gradio           03 Mar 2007   Olivier Crete[44]
media-sound/liteamp          03 Mar 2007   Olivier Crete[44]
media-sound/mpio             03 Mar 2007   Olivier Crete[44]
media-sound/pd-cyclone       03 Mar 2007   Olivier Crete[44]
media-sound/psmix            03 Mar 2007   Olivier Crete[44]
media-sound/sulu             03 Mar 2007   Olivier Crete[44]
media-video/ks3switch        03 Mar 2007   Olivier Crete[44]
sys-apps/s3switch            03 Mar 2007   Olivier Crete[44]
app-admin/kcmgrunlevel       03 Mar 2007   Olivier Crete[44]
www-client/ci                03 Mar 2007   Olivier Crete[44]
www-client/gorua             03 Mar 2007   Olivier Crete[44]
dev-ruby/ruby-gconf          03 Mar 2007   Olivier Crete[44]
dev-ruby/ruby-gdkimlib       03 Mar 2007   Olivier Crete[44]
dev-ruby/ruby-gdkpixbuf      03 Mar 2007   Olivier Crete[44]
dev-ruby/ruby-libart         03 Mar 2007   Olivier Crete[44]
app-portage/kentoo           03 Mar 2007   Olivier Crete[44]
www-client/khttrack          03 Mar 2007   Olivier Crete[44]
dev-java/jdbc3-firebird      03 Mar 2007   William Thomson[45]
net-analyzer/prelude-nids    03 Mar 2007   Markus Ullmann[46]
net-analyzer/prelude-nagios  03 Mar 2007   Markus Ullmann[46]
net-fs/smbfs                 04 Mar 2007   Roy Marples[47]
dev-php5/pecl-pdo-firebird   04 Mar 2007   Luca Longinotti[48]
dev-php4/pecl-apd            04 Mar 2007   Luca Longinotti[48]
dev-php5/pecl-apd            04 Mar 2007   Luca Longinotti[48]

  34. [hidden email]
  35. [hidden email]
  36. [hidden email]
  37. [hidden email]
  38. [hidden email]
  39. [hidden email]
  40. [hidden email]
  41. [hidden email]
  42. [hidden email]
  43. [hidden email]
  44. [hidden email]
  45. [hidden email]
  46. [hidden email]
  47. [hidden email]
  48. [hidden email]


Package:                              Addition date: Contact:
app-dicts/libydpdict[49]              26 Feb 2007    Piotr Jaroszyński[50]
net-dialup/picocom[51]                27 Feb 2007    Mike Frysinger[34]
xfce-extra/xfce4-radio[52]            27 Feb 2007    Samuli Suominen[53]
mail-client/claws-mail-pdf-viewer[54] 27 Feb 2007    Andrej Kacian[55]
xfce-extra/xfce4-cellmodem[56]        27 Feb 2007    Samuli Suominen[53]
dev-python/nose[57]                   27 Feb 2007    Tiziano Müller[58]
dev-python/routes[59]                 27 Feb 2007    Tiziano Müller[58]
dev-python/python-openid[60]          27 Feb 2007    Tiziano Müller[58]
dev-python/paste[61]                  27 Feb 2007    Tiziano Müller[58]
dev-python/pastedeploy[62]            27 Feb 2007    Tiziano Müller[58]
dev-python/pastescript[63]            27 Feb 2007    Tiziano Müller[58]
dev-python/myghty[64]                 27 Feb 2007    Tiziano Müller[58]
dev-python/myghtyutils[65]            27 Feb 2007    Tiziano Müller[58]
dev-python/beaker[66]                 27 Feb 2007    Tiziano Müller[58]
dev-python/simplejson[67]             27 Feb 2007    Tiziano Müller[58]
dev-python/webhelpers[68]             28 Feb 2007    Tiziano Müller[58]
dev-python/genshi[69]                 28 Feb 2007    Tiziano Müller[58]
dev-python/pylons[70]                 28 Feb 2007    Tiziano Müller[58]
dev-python/turbocheetah[71]           28 Feb 2007    Tiziano Müller[58]
dev-python/turbokid[72]               28 Feb 2007    Tiziano Müller[58]
dev-python/ruledispatch[73]           28 Feb 2007    Tiziano Müller[58]
dev-python/turbojson[74]              28 Feb 2007    Tiziano Müller[58]
dev-python/configobj[75]              28 Feb 2007    Tiziano Müller[58]
dev-python/turbogears[76]             28 Feb 2007    Tiziano Müller[58]
dev-python/dpkt[77]                   28 Feb 2007    Tiziano Müller[58]
dev-python/pypcap[78]                 28 Feb 2007    Tiziano Müller[58]
app-arch/fastjar[79]                  28 Feb 2007    Petteri Räty[80]
app-emulation/virtualbox-modules[81]  28 Feb 2007    Markus Ullmann[46]
net-p2p/createtorrent[82]             28 Feb 2007    Raúl Porcel[83]
media-libs/libkarma[84]               28 Feb 2007    Charlie Shepherd[85]
net-fs/djmount[86]                    01 Mar 2007    Doug Goldstein[40]
dev-python/pywavelets[87]             01 Mar 2007    Sebastien Fabbro[88]
kde-base/unsermake[89]                01 Mar 2007    Stefan Schweizer[35]
www-apps/viewvc[90]                   01 Mar 2007    Renat Lumpau[91]
media-libs/libipod[92]                02 Mar 2007    Mike Frysinger[34]
media-libs/libkexiv2[93]              03 Mar 2007    Ioannis Aslanidis[94]
games-puzzle/xpuyopuyo[95]            04 Mar 2007    Alfredo Tupone[96]
sys-libs/libsmbios[97]                04 Mar 2007    Cédric Krier[98]
dev-php4/suhosin[99]                  04 Mar 2007    Luca Longinotti[48]
dev-php5/suhosin[100]                 04 Mar 2007    Luca Longinotti[48]
app-laptop/pommed[101]                04 Mar 2007    Cédric Krier[98]

  34. [hidden email]
  35. [hidden email]
  40. [hidden email]
  46. [hidden email]
  48. [hidden email]
  50. [hidden email]
  53. [hidden email]
  55. [hidden email]
  58. [hidden email]
  80. [hidden email]
  83. [hidden email]
  85. [hidden email]
  88. [hidden email]
  91. [hidden email]
  94. [hidden email]
  96. [hidden email]
  98. [hidden email]

Last Rites:

Package:                        Removal date: Contact:
media-libs/libhydrogen[102]     27 Mar 2007   Stefan Schweizer[35]
app-i18n/skkinput[103]          27 Mar 2007   Stefan Schweizer[35]
media-video/xiron[104]          27 Mar 2007   Stefan Schweizer[35]
net-p2p/freenet[105]            27 Mar 2007   Raúl Porcel[83]
dev-java/avalon-logkit-bin[106] 28 Mar 2007   Petteri Räty[80]
net-irc/nikibot[107]            28 Mar 2007   Matti Bickel[108]
xfce-extra/xfce4-artwork[109]   02 Apr 2007   Samuli Suominen[53]

  35. [hidden email]
  53. [hidden email]
  80. [hidden email]
  83. [hidden email]
 108. [hidden email]

7. Bugzilla


  * Statistics
  * Closed bug ranking
  * New bug rankings


The Gentoo community uses Bugzilla ([110]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 25 February 2007 and 04 March 2007, activity on
the site has resulted in:


  * 627 new bugs during this period
  * 414 bugs closed or resolved during this period
  * 18 previously closed bugs were reopened this period
  * 128 bugs marked as duplicates during this period

Of the 10426 currently open bugs: 17 are labeled 'blocker', 113 are labeled
'critical', and 423 are labeled 'major'.

Closed bug rankings

The developers and teams who have closed the most bugs during this period

  * Python Gentoo Team[111], with 20 closed bugs[112]
  * AMD64 Project[113], with 18 closed bugs[114]
  * Gentoo's Team for Core System packages[115], with 16 closed
  * Gentoo Security[117], with 15 closed bugs[118]
  * Gentoo Web Application Packages Maintainers[119], with 14 closed
  * Perl Devs @ Gentoo[121], with 14 closed bugs[122]
  * Gentoo Linux Gnome Desktop Team[123], with 14 closed bugs[124]
  * Java team[125], with 12 closed bugs[126]

 111. [hidden email]
 113. [hidden email]
 115. [hidden email]
 117. [hidden email]
 119. [hidden email]
 121. [hidden email]
 123. [hidden email]
 125. [hidden email]

New bug rankings

The developers and teams who have been assigned the most new bugs during
this period are:

  * Default Assignee for New Packages[127], with 27 new bugs[128]
  * Alpha Porters[129], with 26 new bugs[130]
  * IA-64 team[131], with 13 new bugs[132]
  * mips team[133], with 11 new bugs[134]
  * AMD64 Project[113], with 10 new bugs[135]
  * Java team[125], with 9 new bugs[136]
  * Gentoo Toolchain Maintainers[137], with 6 new bugs[138]
  * Perl Devs @ Gentoo[121], with 6 new bugs[139]

 113. [hidden email]
 121. [hidden email]
 125. [hidden email]
 127. [hidden email]
 129. [hidden email]
 131. [hidden email]
 133. [hidden email]
 137. [hidden email]

8. GWN feedback

The GWN is staffed by volunteers and members of the community who submit
ideas and articles. If you are interested in writing for the GWN, have
feedback on an article that we have posted, or just have an idea or article
that you would like to submit to the GWN, please send us your feedback[140]
and help make the GWN better.

 140. [hidden email]

9. GWN subscription information

To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
[hidden email].

To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
[hidden email] from the e-mail address you are subscribed

10. Other languages

The Gentoo Weekly Newsletter is also available in the following languages:

  * Chinese (Simplified)[141]
  * Dutch[142]
  * English[143]
  * German[144]
  * Greek[145]
  * French[146]
  * Korean[147]
  * Japanese[148]
  * Italian[149]
  * Polish[150]
  * Portuguese (Brazil)[151]
  * Portuguese (Portugal)[152]
  * Russian[153]
  * Slovak[154]
  * Spanish[155]
  * Turkish[156]


Chris Gianelloni <[hidden email]> - Editor
Robert Buchholz <[hidden email]> - Author
Dimitry Bradt <[hidden email]> - Author
Chrissy Fullam <[hidden email]> - Author

[hidden email] mailing list