---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of 10 January 2005.
---------------------------------------------------------------------------
==============
1. Gentoo News
==============
Discouraging Forum abuse: visual registration confirmation added
----------------------------------------------------------------
In the last week of December 2004, an attacker had registered about 8,500
user accounts from more than 160 hosts, in less than one hour. While the
Forum admins were working on a solution to block these registrations,
users started reporting the mass forum account registrations[1]. A few
hours later 15696 user accounts were deleted[2], taking along a number of
inactive accounts from the past.
1. http://forums.gentoo.org/viewtopic.php?t=271717
2. http://forums.gentoo.org/viewtopic.php?t=271802
To prevent these mass registration attempts from happening again, a visual
registration confirmation has now been added to the Forum user account
registration process. This function was originally implemented in the
phpBB[3] 2.2 development versions, with the changes being backported to
version 2.0.11 of phpBB. The same changes have now been applied to the
customized version of phpBB that is installed at forums.gentoo.org[4].
3. http://www.phpbb.com
4. http://forums.gentoo.org
2.6.10 kernel marked stable
---------------------------
By the time you are reading this, the Linux 2.6.10 release of
gentoo-dev-sources will be marked stable, or in the final stages of being
tested, on supported system architectures. Linux 2.6.10, released late on
Christmas Eve, is proving to be the best kernel release in a long time,
fixing almost all of the issues we know about present in 2.6.9 and
earlier. Relatively few new issues have been reported, and the major ones
have already been fixed. 2.6 users are recommended to upgrade as soon as
possible, as this release also fixes some recently discovered security
vulnerabilities.
==============
2. Future zone
==============
Project goals for 2005
----------------------
A meta-thread on the gentoo-dev mailing list keeps track of goals set
forth for some Gentoo projects. Here's an overview of items scheduled to
see the light of day shortly:
Release engineering
* Biannual release schedule: The first release (2005.0) will be in
January, and the second release (2005.1) will be in July/ August. Each
release will include install cds, stages, and GRP.
* LiveCDs: Plans are to replace the current universal LiveCD with a
Knoppix-like XLiveCD. Media will be renamed accordingly; the minimal
LiveCD will remain but will instead be called the minimal installCD.
* Gentoo Reference Platform (GRP): Working in a joint effort with the
installer project, Release Engineering is working on redefining the GRP.
The current plan, which is subject to change, will use functionality
similar to quickpkg by packaging the installed packages on the XLiveCD and
copying them to the target system.
Kernel
* Migrate all existing ebuilds to kernel-2 and linux-* eclasses
* Push 2.6 for default where possible for headers and sources.
* Consolidate appropriate source packages, e.g. dev-sources ->
vanilla-sources
* Further improve our current eclass framework for additional kernels
(BSD, Darwin)
Gentoo/BSD
* Have a stage or a set of stages that will be used to install
Gentoo/FBSD
* Have a working baselayout.
* Have an installation CD (a.t.m. FreeSBIE can be used)
* Have a fair amount of keyworded ebuilds
* Have some of our *BSD specific patches applied to portage
* Finish our profile, stabilize our set of tarballs
==================
3. Gentoo security
==================
LinPopUp: Buffer overflow in message reply
------------------------------------------
LinPopUp contains a buffer overflow potentially allowing execution of
arbitrary code.
For more information, please see the GLSA Announcement[5]
5. http://www.gentoo.org/security/en/glsa/glsa-200501-01.xml
a2ps: Multiple vulnerabilities
------------------------------
The fixps and psmandup scripts in the a2ps package are vulnerable to
symlink attacks, potentially allowing a local user to overwrite arbitrary
files. A vulnerability in a2ps filename handling could also result in
arbitrary command execution.
For more information, please see the GLSA Announcement[6]
6. http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml
Mozilla, Firefox, Thunderbird: Various vulnerabilities
------------------------------------------------------
Various vulnerabilities were found and fixed in Mozilla-based products,
ranging from a potential buffer overflow and temporary files disclosure to
anti-spoofing issues.
For more information, please see the GLSA Announcement[7]
7. http://www.gentoo.org/security/en/glsa/glsa-200501-03.xml
Shoutcast Server: Remote code execution
---------------------------------------
Shoutcast Server contains a possible buffer overflow that could lead to
the execution of arbitrary code.
For more information, please see the GLSA Announcement[8]
8. http://www.gentoo.org/security/en/glsa/glsa-200501-04.xml
mit-krb5: Heap overflow in libkadm5srv
--------------------------------------
The MIT Kerberos 5 administration library (libkadm5srv) contains a heap
overflow that could lead to execution of arbitrary code.
For more information, please see the GLSA Announcement[9]
9. http://www.gentoo.org/security/en/glsa/glsa-200501-05.xml
tiff: New overflows in image decoding
-------------------------------------
An integer overflow has been found in the TIFF library image decoding
routines and the tiffdump utility, potentially allowing arbitrary code
execution.
For more information, please see the GLSA Announcement[10]
10. http://www.gentoo.org/security/en/glsa/glsa-200501-06.xml
xine-lib: Multiple overflows
----------------------------
xine-lib contains multiple overflows potentially allowing execution of
arbitrary code.
For more information, please see the GLSA Announcement[11]
11. http://www.gentoo.org/security/en/glsa/glsa-200501-07.xml
phpGroupWare: Various vulnerabilities
-------------------------------------
Multiple vulnerabilities have been discovered in phpGroupWare that could
lead to information disclosure or remote compromise.
For more information, please see the GLSA Announcement[12]
12. http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml
xzgv: Multiple overflows
------------------------
xzgv contains multiple overflows that may lead to the execution of
arbitrary code.
For more information, please see the GLSA Announcement[13]
13. http://www.gentoo.org/security/en/glsa/glsa-200501-09.xml
Vilistextum: Buffer overflow vulnerability
------------------------------------------
Vilistextum is vulnerable to a buffer overflow that allows an attacker to
execute arbitrary code through the use of a malicious webpage.
For more information, please see the GLSA Announcement[14]
14. http://www.gentoo.org/security/en/glsa/glsa-200501-10.xml
=========================
4. Heard in the community
=========================
Web forums
----------
Disappearing X causing slight unrest
The decision by Gentoo developers to gently nudge people to use xorg-x11
isn't entirely new, but the deletion of XFree86 from Portage on 1 January
seems to have come as a nasty surprise to some people. One thread out of a
handful, to represent them all:
* I refuse to use xorg....it sucks! (nevermind....user error)[15]
15. http://forums.gentoo.org/viewtopic.php?t=275489
New global moderator Earthwings
Earthwings[16] has already served in the German subforum for several
months before being promoted to deal with the rest of the lot now:
16. http://forums.gentoo.org/profile.php?mode=viewprofile&u=18420
* [forums-announce] New global moderator[17]
17. http://forums.gentoo.org/viewtopic.php?t=277091
gentoo-user
-----------
Achieving Hardware Happiness?
Many laptop users experience the same conundrum: Having a mobile computer
results in different configurations. Most of the time these are
network-related, for example the difference between a corporate LAN and a
home network. But occasionally this includes hardware as well. Many
laptops have hardware docking stations with additional network cards,
video adapters, and even SCSI. This presents a unique issue to Linux users
since most of the time, the various settings are hard-edited into various
files in /etc. Curious how to find your own way to portable paradise? Read
on!
* gentoo and "rc hell"?[18]
18. http://thread.gmane.org/gmane.linux.gentoo.user/113628
Bash Arguments
What could be more Linux-y than a debate on the proper way to delete many
files out of a directory? There's xargs, find, even... for loops? An
informative thread of opinionated answers is what we got this week!
* Bash query? 'Argument list too long'[19]
19. http://thread.gmane.org/gmane.linux.gentoo.user/113591
"Monitoring" CPU Usage
On a more humorous note, one list member posted a "helpful" link to a
newsforge article on a CPU monitoring package called "Hot Babe". We'll
provide GWN readers a link to the gentoo-user thread, and leave it at
that.
* Hot Babe and Debian (GENTOO :-)[20]
20. http://thread.gmane.org/gmane.linux.gentoo.user/114094
gentoo-dev
----------
RFC: Advice on driving compile times down
Stuart Herbert[21] asks how to reduce compile times. Read the thread for
the different possibilities offered to Gentoo users.
21. stuart@gentoo.org
* RFC: Advice on driving compile times down[22]
22. http://thread.gmane.org/gmane.linux.gentoo.devel/23833
xfree gone
With this short notice Gentoo officially stopped supporting xfree. All
users are asked to migrate to xorg.
* xfree gone[23]
23. http://thread.gmane.org/gmane.linux.gentoo.devel/23744
2005.0 2.4 & 2.6 stages
John Davis[24] asks, on behalf of the Gentoo Releng subproject, which
kernel header and sources 2005.0 stages should be offered. He writes: "Our
options for building include (a) only 2.6 stages, (b) only 2.4 stages, or
(c) a combination of 2.4 and 2.6 stages." From rom a release point of view
only one set would be preferred, but many users still depend on 2.4
kernels. This rather long thread explores the many small problems that may
arise and shows how difficult it is to make all people equally happy :-)
24. zhen@gentoo.org
* 2005.0 2.4 & 2.6 stages[25]
25. http://thread.gmane.org/gmane.linux.gentoo.devel/23718
gentoo-server
-------------
From a mailing list mostly frequented by people using Gentoo for
non-desktop purposes, gentoo-server@gentoo.org, here's a noteworthy thread
that has spun from the original poster asking a simple question:
* Who uses Gentoo in production?[26]
26. http://thread.gmane.org/gmane.linux.gentoo.server/1629
=======================
5. Gentoo International
=======================
USA: Gentoo lectures at MIT, 10 and 24 January
----------------------------------------------
Rajiv Manglani[27], Gentoo Linux Security Team member and PPC developer,
will give an introductory (10 January) and an advanced lecture (24
January) on Gentoo Linux at the Massachusetts Institute of Technology,
MIT, in Cambridge, MA. Both lectures are sponsored by the MIT's Student
Information Processing Board (SIPB) and will be held tonight and Monday 24
starting at 20:00, at Building 4[28] room 237 (today) and room 231 (24
January) respectively. The first lecture will focus on giving an overview
and demonstrating a running Gentoo system, while the "Advanced Gentoo
Linux" presentation on 24 January will have more in-depth discussions of
Portage and ebuild script creation, system tools such as qpkg and etcat.
More details can be found in Rajiv's Independent Activities Period Gentoo
lecture announcements[29]. Please make sure to RSVP to the Student
Information Board[30] if you plan on attending.
27. rajiv@gentoo.org
28. http://whereis.mit.edu/map-jpg?selection=4
29. http://stuff.mit.edu/iap/gentoo/
30. sipb-iap-gentoo@mit.edu
Canada: Gentoo LTSP project at elementary school
------------------------------------------------
The Prairie Linux User Group[31] (PLUG) is planning to deploy Gentoo Linux
at the Holy Cross Elementary School in Winnipeg. The project will use
reclaimed hardware previously running various shades of Windows that are
being replaced with Linux due to cost of licensing for upgrades, concerns
about lax security, growing hardware requirements if Windows was chosen as
an upgrade path, and the current platform generally not meeting the
educational requirements at the school any longer. The setup includes an
implementation of the Linux Terminal Server Project[32] (LTSP) across
thirty workstations, with Gentoo Linux running openmosix for the terminal
server system. On Thursday 20 January the PLUG will meet at the University
of Winnipeg[33] (starting at 19:00 in room 2M70) to get a few things
straightened out before performing their real world test at the school on
Sunday, 23 January from 10:00. Thirty elementary students have been
invited to stress-test the system that they might get to keep if it works
as advertized: "If the system is successfully able to meet the
requirements it would be permanently installed," says PLUG member Mike
Crawford[34], a Gentoo dev-perl developer-to-be and maintainer of one of
the official Gentoo file mirrors (gentoo.eliteitminds.com). More details
can be found at the PLUG meeting announcement[35].
31. http://plug.ca
32. http://www.ltsp.org/
33. http://www.uwinnipeg.ca
34. ali3n@eliteitminds.com
35. http://plug.ca/article.php?story=20050107150627250
======================
6. Gentoo in the press
======================
Linux Journal (5 January 2005)
------------------------------
Andrew Cowie with the Linux Journal published a rather flattery piece on
"Gentoo for all the unusual reasons,"[36] providing extensive coverage of
Portage as a tool for professional use: "You might think of Gentoo as a
bleeding-edge distribution for development workstations, but the simple
packaging system can make it a good choice for any production system that
needs to stay up to date," writes the author in his introduction, before
explaining in great detail the steps for installing and updating software
in Gentoo, all nicely accompanied by screenshots. The thoroughly
researched article was among LJ's top reads and most commented-on articles
last week - even without the GWN boosting its popularity yet again...
36. http://www.linuxjournal.com/article/7438
===========
7. Bugzilla
===========
Summary
-------
* Statistics
* Closed bug ranking
* New bug rankings
Statistics
----------
The Gentoo community uses Bugzilla (bugs.gentoo.org[37]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 02 January 2005 and 09 January 2005, activity on
the site has resulted in:
37. http://bugs.gentoo.org
* 815 new bugs during this period
* 528 bugs closed or resolved during this period
* 23 previously closed bugs were reopened this period
Of the 7862 currently open bugs: 117 are labeled 'blocker', 229 are
labeled 'critical', and 568 are labeled 'major'.
Closed bug rankings
-------------------
The developers and teams who have closed the most bugs during this period
are:
* Gentoo's Team for Core System packages[38], with 32 closed bugs[39]
* Java team[40], with 26 closed bugs[41]
* AMD64 Porting Team[42], with 26 closed bugs[43]
* media-video herd[44], with 25 closed bugs[45]
* Gentoo Games[46], with 21 closed bugs[47]
* Gentoo X-windows packagers[48], with 15 closed bugs[49]
* Gentoo Security[50], with 15 closed bugs[51]
* Tim Yamin[52], with 13 closed bugs[53]
38. base-system@gentoo.org
39.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=base-system@gentoo.org
40. java@gentoo.org
41.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=java@gentoo.org
42. amd64@gentoo.org
43.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=amd64@gentoo.org
44. media-video@gentoo.org
45.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=media-video@gentoo.org
46. games@gentoo.org
47.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=games@gentoo.org
48. x11@gentoo.org
49.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=x11@gentoo.org
50. security@gentoo.org
51.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=security@gentoo.org
52. plasmaroo@gentoo.org
53.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=plasmaroo@gentoo.org
New bug rankings
----------------
The developers and teams who have been assigned the most new bugs during
this period are:
* Gentoo Sound Team[54], with 30 new bugs[55]
* AMD64 Porting Team[56], with 21 new bugs[57]
* media-video herd[58], with 20 new bugs[59]
* optical media herd[60], with 19 new bugs[61]
* Gentoo X-windows packagers[62], with 17 new bugs[63]
* Gentoo Linux Gnome Desktop Team[64], with 14 new bugs[65]
* Gentoo's Team for Core System packages[66], with 11 new bugs[67]
* Gentoo VMWare Bug Squashers[68], with 10 new bugs[69]
54. sound@gentoo.org
55.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=sound@gentoo.org
56. amd64@gentoo.org
57.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=amd64@gentoo.org
58. media-video@gentoo.org
59.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=media-video@gentoo.org
60. media-optical@gentoo.org
61.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=media-optical@gentoo.org
62. x11@gentoo.org
63.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=x11@gentoo.org
64. gnome@gentoo.org
65.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=gnome@gentoo.org
66. base-system@gentoo.org
67.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=base-system@gentoo.org
68. vmware@gentoo.org
69.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=vmware@gentoo.org
===========================
8. Moves, adds, and changes
===========================
Moves
-----
The following developers recently left the Gentoo team:
* None this week
Adds
----
The following developers recently joined the Gentoo Linux team:
* Benedikt Böhm (hollow) - Apache
* Saleem Abdulrasool (compnerd) - Java
Changes
-------
The following developers recently changed roles within the Gentoo Linux
project:
* Lance Albertson (Ramereth) - New dev for netmon et al. (on top of his
regular assignment to the infrastructure team)
* Danny Van Dyk (Kugelfang) and Mike Doty (KingTaco) - AMD64 operational
co-leads (taking over from Travis Tilley)
* Jeremy Huddleston (eradicator) - Recruiting co-lead
==================
9. Tips and tricks
==================
Denu - a Portage-savvy menu generator for window managers
---------------------------------------------------------
Are you switching from Fluxbox to Gnome to KDE a lot? Would you like to
try out even more window managers, if it wasn't for the missing
application entries in the menus to hop along with you? This week's tip
brings a nifty solution in reach: Denu[70] is a brandnew tool to assist in
menu generation. It can generate similarly structured menus for various
window managers enabling easy transitions from one to another. Denu
synchronizes with an online database to allow program definitions to be
updated without a software update, and best of all: Portage itself
provides the installed program data!
70. http://denu.sourceforge.net
---------------------------------------------------------------------------
| Code Listing 9.1: |
|Emerge |
Denu-----------------------------------------------------------------------
--
| |
|# cd $PORTDIR_OVERLAY/x11-misc/denu Create the appropriate overlay as |
necessary (Denu is not in Portage yet)
|# wget http://dl.sourceforge.net/sourceforge/denu/denu-2.1.2-r1.ebuild |
|# emerge denu |
| |
---------------------------------------------------------------------------
Before we go any further backup any menu configurations you don't want
overwritten. Now run denu as a normal user, Denu is not meant to be run as
root.
Figure 9.1: Screenshot of menu creation with Denu
http://www.gentoo.org/images/gwn/20050110_denu.jpg
The first step after installing Denu is to run Update (for program
definitions) and Sysupdate (for the current list of installed programs).
Neither of these are run at startup, so after installing a new program via
Portage, Sysupdate will need execution again.
To create a menu there are two approaches: hand pick entries from the
Installed Tree and add them, or you can hit Autofill, and Denu will
automatically generate a menu based on the information it has.
Reorganizing a newly created menu is as simple as drag and drop, menu
systems will respect the order of entries, except for Gnome and KDE who
sort things alphabetically. Click on generate and then one of the boxes
corresponding to your desired window manager or desktop environment. Some
window managers like Fluxbox be able to use your menu immediately, others
may need to be reconfigured or restarted.
Denu is still under development, but author Shux[71] has scanned half of
the Portage tree for items that might be needed in a GUI menu already. For
the remaining half (or things that might need adding in the future) Denu
provides a tool to include other applications not in its database yet.
Adding programs and their categories, descriptions etc. is just as easy as
shifting them around. For questions and answers of all sorts check the
lively Denu 2.0 thread in the Forums[72].
71. shux_linux@comcast.net
72. http://forums.gentoo.org/viewtopic.php?t=268988
=====================
10. Contribute to GWN
=====================
Interested in contributing to the Gentoo Weekly Newsletter? Send us an
email[73].
73. gwn-feedback@gentoo.org
================
11. GWN feedback
================
Please send us your feedback[74] and help make the GWN better.
74. gwn-feedback@gentoo.org
================================
12. GWN subscription information
================================
To subscribe to the Gentoo Weekly Newsletter, send a blank email to
gentoo-gwn-subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to
gentoo-gwn-unsubscribe@gentoo.org from the email address you are
subscribed under.
===================
13. Other languages
===================
The Gentoo Weekly Newsletter is also available in the following languages:
* Danish[75]
* Dutch[76]
* English[77]
* German[78]
* French[79]
* Japanese[80]
* Italian[81]
* Polish[82]
* Portuguese (Brazil)[83]
* Portuguese (Portugal)[84]
* Russian[85]
* Spanish[86]
* Turkish[87]
75. http://www.gentoo.org/news/da/gwn/gwn.xml
76. http://www.gentoo.org/news/be/gwn/gwn.xml
77. http://www.gentoo.org/news/en/gwn/gwn.xml
78. http://www.gentoo.org/news/de/gwn/gwn.xml
79. http://www.gentoo.org/news/fr/gwn/gwn.xml
80. http://www.gentoo.org/news/ja/gwn/gwn.xml
81. http://www.gentoo.org/news/it/gwn/gwn.xml
82. http://www.gentoo.org/news/pl/gwn/gwn.xml
83. http://www.gentoo.org/news/br/gwn/gwn.xml
84. http://www.gentoo.org/news/pt/gwn/gwn.xml
85. http://www.gentoo.org/news/ru/gwn/gwn.xml
86. http://www.gentoo.org/news/es/gwn/gwn.xml
87. http://www.gentoo.org/news/tr/gwn/gwn.xml
Ulrich Plate <plate@gentoo.org> - Editor
Brian Downey <bdowney@briandowney.net> - Author
Daniel Drake <dsd@gentoo.org> - Author
Christian Hartmann <ian@gentoo.org> - Author
Patrick Lauer <patrick@gentoo.org> - Author
--
gentoo-gwn@gentoo.org mailing list
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of 10 January 2005.
---------------------------------------------------------------------------
==============
1. Gentoo News
==============
Discouraging Forum abuse: visual registration confirmation added
----------------------------------------------------------------
In the last week of December 2004, an attacker had registered about 8,500
user accounts from more than 160 hosts, in less than one hour. While the
Forum admins were working on a solution to block these registrations,
users started reporting the mass forum account registrations[1]. A few
hours later 15696 user accounts were deleted[2], taking along a number of
inactive accounts from the past.
1. http://forums.gentoo.org/viewtopic.php?t=271717
2. http://forums.gentoo.org/viewtopic.php?t=271802
To prevent these mass registration attempts from happening again, a visual
registration confirmation has now been added to the Forum user account
registration process. This function was originally implemented in the
phpBB[3] 2.2 development versions, with the changes being backported to
version 2.0.11 of phpBB. The same changes have now been applied to the
customized version of phpBB that is installed at forums.gentoo.org[4].
3. http://www.phpbb.com
4. http://forums.gentoo.org
2.6.10 kernel marked stable
---------------------------
By the time you are reading this, the Linux 2.6.10 release of
gentoo-dev-sources will be marked stable, or in the final stages of being
tested, on supported system architectures. Linux 2.6.10, released late on
Christmas Eve, is proving to be the best kernel release in a long time,
fixing almost all of the issues we know about present in 2.6.9 and
earlier. Relatively few new issues have been reported, and the major ones
have already been fixed. 2.6 users are recommended to upgrade as soon as
possible, as this release also fixes some recently discovered security
vulnerabilities.
==============
2. Future zone
==============
Project goals for 2005
----------------------
A meta-thread on the gentoo-dev mailing list keeps track of goals set
forth for some Gentoo projects. Here's an overview of items scheduled to
see the light of day shortly:
Release engineering
* Biannual release schedule: The first release (2005.0) will be in
January, and the second release (2005.1) will be in July/ August. Each
release will include install cds, stages, and GRP.
* LiveCDs: Plans are to replace the current universal LiveCD with a
Knoppix-like XLiveCD. Media will be renamed accordingly; the minimal
LiveCD will remain but will instead be called the minimal installCD.
* Gentoo Reference Platform (GRP): Working in a joint effort with the
installer project, Release Engineering is working on redefining the GRP.
The current plan, which is subject to change, will use functionality
similar to quickpkg by packaging the installed packages on the XLiveCD and
copying them to the target system.
Kernel
* Migrate all existing ebuilds to kernel-2 and linux-* eclasses
* Push 2.6 for default where possible for headers and sources.
* Consolidate appropriate source packages, e.g. dev-sources ->
vanilla-sources
* Further improve our current eclass framework for additional kernels
(BSD, Darwin)
Gentoo/BSD
* Have a stage or a set of stages that will be used to install
Gentoo/FBSD
* Have a working baselayout.
* Have an installation CD (a.t.m. FreeSBIE can be used)
* Have a fair amount of keyworded ebuilds
* Have some of our *BSD specific patches applied to portage
* Finish our profile, stabilize our set of tarballs
==================
3. Gentoo security
==================
LinPopUp: Buffer overflow in message reply
------------------------------------------
LinPopUp contains a buffer overflow potentially allowing execution of
arbitrary code.
For more information, please see the GLSA Announcement[5]
5. http://www.gentoo.org/security/en/glsa/glsa-200501-01.xml
a2ps: Multiple vulnerabilities
------------------------------
The fixps and psmandup scripts in the a2ps package are vulnerable to
symlink attacks, potentially allowing a local user to overwrite arbitrary
files. A vulnerability in a2ps filename handling could also result in
arbitrary command execution.
For more information, please see the GLSA Announcement[6]
6. http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml
Mozilla, Firefox, Thunderbird: Various vulnerabilities
------------------------------------------------------
Various vulnerabilities were found and fixed in Mozilla-based products,
ranging from a potential buffer overflow and temporary files disclosure to
anti-spoofing issues.
For more information, please see the GLSA Announcement[7]
7. http://www.gentoo.org/security/en/glsa/glsa-200501-03.xml
Shoutcast Server: Remote code execution
---------------------------------------
Shoutcast Server contains a possible buffer overflow that could lead to
the execution of arbitrary code.
For more information, please see the GLSA Announcement[8]
8. http://www.gentoo.org/security/en/glsa/glsa-200501-04.xml
mit-krb5: Heap overflow in libkadm5srv
--------------------------------------
The MIT Kerberos 5 administration library (libkadm5srv) contains a heap
overflow that could lead to execution of arbitrary code.
For more information, please see the GLSA Announcement[9]
9. http://www.gentoo.org/security/en/glsa/glsa-200501-05.xml
tiff: New overflows in image decoding
-------------------------------------
An integer overflow has been found in the TIFF library image decoding
routines and the tiffdump utility, potentially allowing arbitrary code
execution.
For more information, please see the GLSA Announcement[10]
10. http://www.gentoo.org/security/en/glsa/glsa-200501-06.xml
xine-lib: Multiple overflows
----------------------------
xine-lib contains multiple overflows potentially allowing execution of
arbitrary code.
For more information, please see the GLSA Announcement[11]
11. http://www.gentoo.org/security/en/glsa/glsa-200501-07.xml
phpGroupWare: Various vulnerabilities
-------------------------------------
Multiple vulnerabilities have been discovered in phpGroupWare that could
lead to information disclosure or remote compromise.
For more information, please see the GLSA Announcement[12]
12. http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml
xzgv: Multiple overflows
------------------------
xzgv contains multiple overflows that may lead to the execution of
arbitrary code.
For more information, please see the GLSA Announcement[13]
13. http://www.gentoo.org/security/en/glsa/glsa-200501-09.xml
Vilistextum: Buffer overflow vulnerability
------------------------------------------
Vilistextum is vulnerable to a buffer overflow that allows an attacker to
execute arbitrary code through the use of a malicious webpage.
For more information, please see the GLSA Announcement[14]
14. http://www.gentoo.org/security/en/glsa/glsa-200501-10.xml
=========================
4. Heard in the community
=========================
Web forums
----------
Disappearing X causing slight unrest
The decision by Gentoo developers to gently nudge people to use xorg-x11
isn't entirely new, but the deletion of XFree86 from Portage on 1 January
seems to have come as a nasty surprise to some people. One thread out of a
handful, to represent them all:
* I refuse to use xorg....it sucks! (nevermind....user error)[15]
15. http://forums.gentoo.org/viewtopic.php?t=275489
New global moderator Earthwings
Earthwings[16] has already served in the German subforum for several
months before being promoted to deal with the rest of the lot now:
16. http://forums.gentoo.org/profile.php?mode=viewprofile&u=18420
* [forums-announce] New global moderator[17]
17. http://forums.gentoo.org/viewtopic.php?t=277091
gentoo-user
-----------
Achieving Hardware Happiness?
Many laptop users experience the same conundrum: Having a mobile computer
results in different configurations. Most of the time these are
network-related, for example the difference between a corporate LAN and a
home network. But occasionally this includes hardware as well. Many
laptops have hardware docking stations with additional network cards,
video adapters, and even SCSI. This presents a unique issue to Linux users
since most of the time, the various settings are hard-edited into various
files in /etc. Curious how to find your own way to portable paradise? Read
on!
* gentoo and "rc hell"?[18]
18. http://thread.gmane.org/gmane.linux.gentoo.user/113628
Bash Arguments
What could be more Linux-y than a debate on the proper way to delete many
files out of a directory? There's xargs, find, even... for loops? An
informative thread of opinionated answers is what we got this week!
* Bash query? 'Argument list too long'[19]
19. http://thread.gmane.org/gmane.linux.gentoo.user/113591
"Monitoring" CPU Usage
On a more humorous note, one list member posted a "helpful" link to a
newsforge article on a CPU monitoring package called "Hot Babe". We'll
provide GWN readers a link to the gentoo-user thread, and leave it at
that.
* Hot Babe and Debian (GENTOO :-)[20]
20. http://thread.gmane.org/gmane.linux.gentoo.user/114094
gentoo-dev
----------
RFC: Advice on driving compile times down
Stuart Herbert[21] asks how to reduce compile times. Read the thread for
the different possibilities offered to Gentoo users.
21. stuart@gentoo.org
* RFC: Advice on driving compile times down[22]
22. http://thread.gmane.org/gmane.linux.gentoo.devel/23833
xfree gone
With this short notice Gentoo officially stopped supporting xfree. All
users are asked to migrate to xorg.
* xfree gone[23]
23. http://thread.gmane.org/gmane.linux.gentoo.devel/23744
2005.0 2.4 & 2.6 stages
John Davis[24] asks, on behalf of the Gentoo Releng subproject, which
kernel header and sources 2005.0 stages should be offered. He writes: "Our
options for building include (a) only 2.6 stages, (b) only 2.4 stages, or
(c) a combination of 2.4 and 2.6 stages." From rom a release point of view
only one set would be preferred, but many users still depend on 2.4
kernels. This rather long thread explores the many small problems that may
arise and shows how difficult it is to make all people equally happy :-)
24. zhen@gentoo.org
* 2005.0 2.4 & 2.6 stages[25]
25. http://thread.gmane.org/gmane.linux.gentoo.devel/23718
gentoo-server
-------------
From a mailing list mostly frequented by people using Gentoo for
non-desktop purposes, gentoo-server@gentoo.org, here's a noteworthy thread
that has spun from the original poster asking a simple question:
* Who uses Gentoo in production?[26]
26. http://thread.gmane.org/gmane.linux.gentoo.server/1629
=======================
5. Gentoo International
=======================
USA: Gentoo lectures at MIT, 10 and 24 January
----------------------------------------------
Rajiv Manglani[27], Gentoo Linux Security Team member and PPC developer,
will give an introductory (10 January) and an advanced lecture (24
January) on Gentoo Linux at the Massachusetts Institute of Technology,
MIT, in Cambridge, MA. Both lectures are sponsored by the MIT's Student
Information Processing Board (SIPB) and will be held tonight and Monday 24
starting at 20:00, at Building 4[28] room 237 (today) and room 231 (24
January) respectively. The first lecture will focus on giving an overview
and demonstrating a running Gentoo system, while the "Advanced Gentoo
Linux" presentation on 24 January will have more in-depth discussions of
Portage and ebuild script creation, system tools such as qpkg and etcat.
More details can be found in Rajiv's Independent Activities Period Gentoo
lecture announcements[29]. Please make sure to RSVP to the Student
Information Board[30] if you plan on attending.
27. rajiv@gentoo.org
28. http://whereis.mit.edu/map-jpg?selection=4
29. http://stuff.mit.edu/iap/gentoo/
30. sipb-iap-gentoo@mit.edu
Canada: Gentoo LTSP project at elementary school
------------------------------------------------
The Prairie Linux User Group[31] (PLUG) is planning to deploy Gentoo Linux
at the Holy Cross Elementary School in Winnipeg. The project will use
reclaimed hardware previously running various shades of Windows that are
being replaced with Linux due to cost of licensing for upgrades, concerns
about lax security, growing hardware requirements if Windows was chosen as
an upgrade path, and the current platform generally not meeting the
educational requirements at the school any longer. The setup includes an
implementation of the Linux Terminal Server Project[32] (LTSP) across
thirty workstations, with Gentoo Linux running openmosix for the terminal
server system. On Thursday 20 January the PLUG will meet at the University
of Winnipeg[33] (starting at 19:00 in room 2M70) to get a few things
straightened out before performing their real world test at the school on
Sunday, 23 January from 10:00. Thirty elementary students have been
invited to stress-test the system that they might get to keep if it works
as advertized: "If the system is successfully able to meet the
requirements it would be permanently installed," says PLUG member Mike
Crawford[34], a Gentoo dev-perl developer-to-be and maintainer of one of
the official Gentoo file mirrors (gentoo.eliteitminds.com). More details
can be found at the PLUG meeting announcement[35].
31. http://plug.ca
32. http://www.ltsp.org/
33. http://www.uwinnipeg.ca
34. ali3n@eliteitminds.com
35. http://plug.ca/article.php?story=20050107150627250
======================
6. Gentoo in the press
======================
Linux Journal (5 January 2005)
------------------------------
Andrew Cowie with the Linux Journal published a rather flattery piece on
"Gentoo for all the unusual reasons,"[36] providing extensive coverage of
Portage as a tool for professional use: "You might think of Gentoo as a
bleeding-edge distribution for development workstations, but the simple
packaging system can make it a good choice for any production system that
needs to stay up to date," writes the author in his introduction, before
explaining in great detail the steps for installing and updating software
in Gentoo, all nicely accompanied by screenshots. The thoroughly
researched article was among LJ's top reads and most commented-on articles
last week - even without the GWN boosting its popularity yet again...
36. http://www.linuxjournal.com/article/7438
===========
7. Bugzilla
===========
Summary
-------
* Statistics
* Closed bug ranking
* New bug rankings
Statistics
----------
The Gentoo community uses Bugzilla (bugs.gentoo.org[37]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 02 January 2005 and 09 January 2005, activity on
the site has resulted in:
37. http://bugs.gentoo.org
* 815 new bugs during this period
* 528 bugs closed or resolved during this period
* 23 previously closed bugs were reopened this period
Of the 7862 currently open bugs: 117 are labeled 'blocker', 229 are
labeled 'critical', and 568 are labeled 'major'.
Closed bug rankings
-------------------
The developers and teams who have closed the most bugs during this period
are:
* Gentoo's Team for Core System packages[38], with 32 closed bugs[39]
* Java team[40], with 26 closed bugs[41]
* AMD64 Porting Team[42], with 26 closed bugs[43]
* media-video herd[44], with 25 closed bugs[45]
* Gentoo Games[46], with 21 closed bugs[47]
* Gentoo X-windows packagers[48], with 15 closed bugs[49]
* Gentoo Security[50], with 15 closed bugs[51]
* Tim Yamin[52], with 13 closed bugs[53]
38. base-system@gentoo.org
39.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=base-system@gentoo.org
40. java@gentoo.org
41.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=java@gentoo.org
42. amd64@gentoo.org
43.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=amd64@gentoo.org
44. media-video@gentoo.org
45.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=media-video@gentoo.org
46. games@gentoo.org
47.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=games@gentoo.org
48. x11@gentoo.org
49.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=x11@gentoo.org
50. security@gentoo.org
51.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=security@gentoo.org
52. plasmaroo@gentoo.org
53.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2005-01-02&chfieldto=2005-01-09&resolution=FIXED&assigned_to=plasmaroo@gentoo.org
New bug rankings
----------------
The developers and teams who have been assigned the most new bugs during
this period are:
* Gentoo Sound Team[54], with 30 new bugs[55]
* AMD64 Porting Team[56], with 21 new bugs[57]
* media-video herd[58], with 20 new bugs[59]
* optical media herd[60], with 19 new bugs[61]
* Gentoo X-windows packagers[62], with 17 new bugs[63]
* Gentoo Linux Gnome Desktop Team[64], with 14 new bugs[65]
* Gentoo's Team for Core System packages[66], with 11 new bugs[67]
* Gentoo VMWare Bug Squashers[68], with 10 new bugs[69]
54. sound@gentoo.org
55.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=sound@gentoo.org
56. amd64@gentoo.org
57.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=amd64@gentoo.org
58. media-video@gentoo.org
59.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=media-video@gentoo.org
60. media-optical@gentoo.org
61.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=media-optical@gentoo.org
62. x11@gentoo.org
63.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=x11@gentoo.org
64. gnome@gentoo.org
65.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=gnome@gentoo.org
66. base-system@gentoo.org
67.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=base-system@gentoo.org
68. vmware@gentoo.org
69.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2005-01-02&chfieldto=2005-01-09&assigned_to=vmware@gentoo.org
===========================
8. Moves, adds, and changes
===========================
Moves
-----
The following developers recently left the Gentoo team:
* None this week
Adds
----
The following developers recently joined the Gentoo Linux team:
* Benedikt Böhm (hollow) - Apache
* Saleem Abdulrasool (compnerd) - Java
Changes
-------
The following developers recently changed roles within the Gentoo Linux
project:
* Lance Albertson (Ramereth) - New dev for netmon et al. (on top of his
regular assignment to the infrastructure team)
* Danny Van Dyk (Kugelfang) and Mike Doty (KingTaco) - AMD64 operational
co-leads (taking over from Travis Tilley)
* Jeremy Huddleston (eradicator) - Recruiting co-lead
==================
9. Tips and tricks
==================
Denu - a Portage-savvy menu generator for window managers
---------------------------------------------------------
Are you switching from Fluxbox to Gnome to KDE a lot? Would you like to
try out even more window managers, if it wasn't for the missing
application entries in the menus to hop along with you? This week's tip
brings a nifty solution in reach: Denu[70] is a brandnew tool to assist in
menu generation. It can generate similarly structured menus for various
window managers enabling easy transitions from one to another. Denu
synchronizes with an online database to allow program definitions to be
updated without a software update, and best of all: Portage itself
provides the installed program data!
70. http://denu.sourceforge.net
---------------------------------------------------------------------------
| Code Listing 9.1: |
|Emerge |
Denu-----------------------------------------------------------------------
--
| |
|# cd $PORTDIR_OVERLAY/x11-misc/denu Create the appropriate overlay as |
necessary (Denu is not in Portage yet)
|# wget http://dl.sourceforge.net/sourceforge/denu/denu-2.1.2-r1.ebuild |
|# emerge denu |
| |
---------------------------------------------------------------------------
Before we go any further backup any menu configurations you don't want
overwritten. Now run denu as a normal user, Denu is not meant to be run as
root.
Figure 9.1: Screenshot of menu creation with Denu
http://www.gentoo.org/images/gwn/20050110_denu.jpg
The first step after installing Denu is to run Update (for program
definitions) and Sysupdate (for the current list of installed programs).
Neither of these are run at startup, so after installing a new program via
Portage, Sysupdate will need execution again.
To create a menu there are two approaches: hand pick entries from the
Installed Tree and add them, or you can hit Autofill, and Denu will
automatically generate a menu based on the information it has.
Reorganizing a newly created menu is as simple as drag and drop, menu
systems will respect the order of entries, except for Gnome and KDE who
sort things alphabetically. Click on generate and then one of the boxes
corresponding to your desired window manager or desktop environment. Some
window managers like Fluxbox be able to use your menu immediately, others
may need to be reconfigured or restarted.
Denu is still under development, but author Shux[71] has scanned half of
the Portage tree for items that might be needed in a GUI menu already. For
the remaining half (or things that might need adding in the future) Denu
provides a tool to include other applications not in its database yet.
Adding programs and their categories, descriptions etc. is just as easy as
shifting them around. For questions and answers of all sorts check the
lively Denu 2.0 thread in the Forums[72].
71. shux_linux@comcast.net
72. http://forums.gentoo.org/viewtopic.php?t=268988
=====================
10. Contribute to GWN
=====================
Interested in contributing to the Gentoo Weekly Newsletter? Send us an
email[73].
73. gwn-feedback@gentoo.org
================
11. GWN feedback
================
Please send us your feedback[74] and help make the GWN better.
74. gwn-feedback@gentoo.org
================================
12. GWN subscription information
================================
To subscribe to the Gentoo Weekly Newsletter, send a blank email to
gentoo-gwn-subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to
gentoo-gwn-unsubscribe@gentoo.org from the email address you are
subscribed under.
===================
13. Other languages
===================
The Gentoo Weekly Newsletter is also available in the following languages:
* Danish[75]
* Dutch[76]
* English[77]
* German[78]
* French[79]
* Japanese[80]
* Italian[81]
* Polish[82]
* Portuguese (Brazil)[83]
* Portuguese (Portugal)[84]
* Russian[85]
* Spanish[86]
* Turkish[87]
75. http://www.gentoo.org/news/da/gwn/gwn.xml
76. http://www.gentoo.org/news/be/gwn/gwn.xml
77. http://www.gentoo.org/news/en/gwn/gwn.xml
78. http://www.gentoo.org/news/de/gwn/gwn.xml
79. http://www.gentoo.org/news/fr/gwn/gwn.xml
80. http://www.gentoo.org/news/ja/gwn/gwn.xml
81. http://www.gentoo.org/news/it/gwn/gwn.xml
82. http://www.gentoo.org/news/pl/gwn/gwn.xml
83. http://www.gentoo.org/news/br/gwn/gwn.xml
84. http://www.gentoo.org/news/pt/gwn/gwn.xml
85. http://www.gentoo.org/news/ru/gwn/gwn.xml
86. http://www.gentoo.org/news/es/gwn/gwn.xml
87. http://www.gentoo.org/news/tr/gwn/gwn.xml
Ulrich Plate <plate@gentoo.org> - Editor
Brian Downey <bdowney@briandowney.net> - Author
Daniel Drake <dsd@gentoo.org> - Author
Christian Hartmann <ian@gentoo.org> - Author
Patrick Lauer <patrick@gentoo.org> - Author
--
gentoo-gwn@gentoo.org mailing list