Mailing List Archive

Gentoo Weekly Newsletter 27 February 2006
---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of 27 February 2006.
---------------------------------------------------------------------------

==============
1. Gentoo news
==============

2006.0 released
---------------

The first Gentoo Linux in the 2006 series has been available since 0:00
UTC today, complete with three desktop environments (KDE, GNOME and XFCE),
GCC 3.4.4 and a 2.6.15 kernel. This milestone release is the first to
include the brand new Gentoo Linux Installer, official support for EM64T,
a fully-fledged Gnome environment, and NPTL toolchains in various
architectures.

Architectures from Alpha to Sparc have improved significantly over 2005.1,
providing more features and options than ever before, and with PPC64
making Gentoo the first Linux distribution to provide optimized packages
not only for the G5, but also the POWER5 architecture. More details about
this release can be found on the Release Engineering project's
announcement page[1].

1. http://www.gentoo.org/proj/en/releng/release/2006.0/2006.0.xml

Gentoo at FOSDEM 2006
---------------------

This year's FOSDEM, Europe's most important meeting for open-source
development, saw more Gentoo developers and from more countries than ever.
Visitors to the Gentoo booth could grab a 2006.0 release on CD for x86,
PPC and AMD64 before anyone else, and the presentations at the Gentoo
devroom gave a broad overview of activities in the project.

The first CDs of the 2006.0 release were selling faster than the three
busy burners could produce them, and T-Shirts were sold out by tea time on
the first day. The architectures on display managed to raise more than
just a few eyebrows: a Sun Ultra 20 running Solaris 9 complete with
Portaris, the Portage port to Sun, Inc.'s operating system, and two
generations of Genesi[2]'s PowerPC workstations, the Pegasos ODW, were the
highlights at the booth.

2. http://ww.genesi.lu

Figure 1.1: Release media for 2006.0, workstations on display
http://www.gentoo.org/images/gwn/20060227_fosdem1.jpg

Crowds were particularly thick in front of the Gentoo stand, a major
attraction among the many projects represented at the conference. Two
dozen Gentoo developers took turns manning the booth, supported by freshly
roasted coffee from Chicago, courtesy of Mike Doty[3] who probably needed
it most, too.

3. kingtaco@gentoo.org

Figure 1.2: Left to right: plate, genone, grobian, patrick, hansmi, SeJo,
and kingtaco
http://www.gentoo.org/images/gwn/20060227_fosdem2.jpg

Figure 1.3: Left to right: pvdabeel, usata, ferdy, and wolf31o2
http://www.gentoo.org/images/gwn/20060227_fosdem3.jpg

Even the FOSDEM quantum singularity, a traditional event witnessed every
year since the first visit of Daniel Robbins[4] to Brussels in 2003,
happened at the Gentoo booth. Logic collapsed in a spectacular way when
the only wireless connectivity available to all the open-source projects
in the corridors of FOSDEM had to be provided temporarily from Jochen
Maes'[5] iBook -- running Mac OS X.

4. http://www.gentoo.org/news/en/gwn/20030224-newsletter.xml
5. sejo@gentoo.org

3rd European Gentoo Developer Meeting
-------------------------------------

Figure 1.1: Gentoo developers meeting at FOSDEM 2006
http://www.gentoo.org/images/gwn/20060227_devroom.jpg

Embedded between the morning and afternoon presentations for the general
public at the FOSDEM devroom, the third edition of the European Gentoo
developer community meeting was anything but a luncheon. 25 developers
from around the globe had found their way to Brussels and spent two hours
discussing the most pressing issues for Gentoo. The very concentrated
debate focussed on how the project should represent itself when appearing
in public: conference organization, press relations and PR will be
reorganized.

Developer relations and recruiting were the second main topic, with Mike
Doty promoting the highly successful AMD64 archtesters as a role model for
other projects. Archtesters allow for thorough testing of packages until
they fail to break under no circumstances, and they typically gain Gentoo
developer status much easier because they get a chance to prove their
abilities to an entire peer group, not just an individual mentor as in
traditional recruiting.

Some of the current organizational deficits in the relationship between
the Gentoo Foundation and satellite organizations in Europe and elsewhere
will be addressed over the next months, with the purpose of binding local
support chapters or associations in various countries into a fully-fledged
umbrella structure. The aim is to set up the necessary structure to assign
and transfer tasks and duties, make funding available where it's most
needed, and protect the licenses and trademarks in an effective manner.

Bugday on 4 March
-----------------

The Gentoo Documentation Project[6] will be taking part in the upcoming
Gentoo Bugday[7] on this coming Saturday, 4 March 2006. There are a number
of open bugs that the team wishes to resolve and would like to call upon
interested people to join them in #gentoo-bugs and #gentoo-doc and help
squash the docs buglist down to zero.

6. http://gdp.gentoo.org
7. http://bugday.gentoo.org

Erratum
-------

In the GWN of 6 February, the venue for the spring open-source
conference[8] in Tokyo came out slightly garbled. The Japan Electronics
College where the conference is going to take place is not in Ogikubo as
originally published, but in Okubo. We apologize for the mistake.

8. http://www.ospn.jp/osc2006

=======================
2. Gentoo international
=======================

Germany: Chemnitzer Linuxtage
-----------------------------

Tobias Scherbaum[9], Jens Blaesche and Gentoo's former developer and MIPS
port founder Jan Seidel will represent Gentoo at the Chemnitzer
Linuxtage[10] next weekend in East Germany's Saxony region. This year's
Gentoo booth once again provides easy-access to merchandising articles
including Shirts, Posters and Case badges. Especially for users in this
region without the possibility of broadband Internet-access the German NFP
"Friends of Gentoo e.V.[11]" remastered the 2006.0 release-media and put
them together with stages and lots of distfiles on a DVD which will only
be sold in Chemnitz.

9. dertobi123@gentoo.org
10. http://chemnitzer.linux-tage.de
11. http://www.gentoo-ev.org

On Sunday morning, Gentoo Developer Tobias Scherbaum will give a talk
about "The Gentoo Metadistribution[12]", an introduction to Gentoos
history and evolution, Gentoos special features and technical aspects.
Finally we would like to invite Gentoo users to visit our booth and tell
us about their first experiences with the last 2006.0 Gentoo release. We
are looking forward to meeting you in Chemnitz!

12. http://chemnitzer.linux-tage.de/2006/vortraege/detail.html?idx=343

=========================
3. Gentoo developer moves
=========================

Moves
-----

The following developers recently left the Gentoo project:

* None this week

Adds
----

The following developers recently joined the Gentoo project:

* None this week

Changes
-------

The following developers recently changed roles within the Gentoo project:

* None this week

==================
4. Gentoo Security
==================

OpenSSH, Dropbear: Insecure use of system() call
------------------------------------------------

A flaw in OpenSSH and Dropbear allows local users to elevate their
privileges via scp.

For more information, please see the GLSA Announcement[13]

13. http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml

GPdf: heap overflows in included Xpdf code
------------------------------------------

GPdf includes vulnerable Xpdf code to handle PDF files, making it
vulnerable to the execution of arbitrary code.

For more information, please see the GLSA Announcement[14]

14. http://www.gentoo.org/security/en/glsa/glsa-200602-12.xml

GraphicsMagick: Format string vulnerability
-------------------------------------------

A vulnerability in GraphicsMagick allows attackers to crash the
application and potentially execute arbitrary code.

For more information, please see the GLSA Announcement[15]

15. http://www.gentoo.org/security/en/glsa/glsa-200602-13.xml

noweb: Insecure temporary file creation
---------------------------------------

noweb is vulnerable to symlink attacks, potentially allowing a local user
to overwrite arbitrary files.

For more information, please see the GLSA Announcement[16]

16. http://www.gentoo.org/security/en/glsa/glsa-200602-14.xml

===========
5. Bugzilla
===========

Statistics
----------

The Gentoo community uses Bugzilla (bugs.gentoo.org[17]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 19 February 2006 and 26 February 2006, activity
on the site has resulted in:

17. http://bugs.gentoo.org

* 785 new bugs during this period
* 380 bugs closed or resolved during this period
* 26 previously closed bugs were reopened this period

Of the 9431 currently open bugs: 65 are labeled 'blocker', 156 are labeled
'critical', and 517 are labeled 'major'.

Closed bug rankings
-------------------

The developers and teams who have closed the most bugs during this period
are:

* Gentoo's Team for Core System packages[18], with 19 closed bugs[19]
* Gentoo Sound Team[20], with 14 closed bugs[21]
* Perl Devs @ Gentoo[22], with 13 closed bugs[23]
* Heinrich Wendel[24], with 12 closed bugs[25]
* Gentoo Games[26], with 10 closed bugs[27]
* Gentoo Toolchain Maintainers[28], with 9 closed bugs[29]
* Robin Johnson[30], with 9 closed bugs[31]
* Xavier Neys[32], with 9 closed bugs[33]
18. base-system@gentoo.org
19.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-02-19&chfieldto=2006-02-26&resolution=FIXED&assigned_to=base-system@gentoo.org
20. sound@gentoo.org
21.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-02-19&chfieldto=2006-02-26&resolution=FIXED&assigned_to=sound@gentoo.org
22. perl@gentoo.org
23.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-02-19&chfieldto=2006-02-26&resolution=FIXED&assigned_to=perl@gentoo.org
24. lanius@gentoo.org
25.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-02-19&chfieldto=2006-02-26&resolution=FIXED&assigned_to=lanius@gentoo.org
26. games@gentoo.org
27.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-02-19&chfieldto=2006-02-26&resolution=FIXED&assigned_to=games@gentoo.org
28. toolchain@gentoo.org
29.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-02-19&chfieldto=2006-02-26&resolution=FIXED&assigned_to=toolchain@gentoo.org
30. robbat2@gentoo.org
31.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-02-19&chfieldto=2006-02-26&resolution=FIXED&assigned_to=robbat2@gentoo.org
32. neysx@gentoo.org
33.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-02-19&chfieldto=2006-02-26&resolution=FIXED&assigned_to=neysx@gentoo.org


New bug rankings
----------------

The developers and teams who have been assigned the most new bugs during
this period are:

* Default Assignee for New Packages[34], with 44 new bugs[35]
* AMD64 Porting Team[36], with 10 new bugs[37]
* Default Assignee for Orphaned Packages[38], with 9 new bugs[39]
* Gentoo Linux Gnome Desktop Team[40], with 8 new bugs[41]
* Perl Devs @ Gentoo[42], with 7 new bugs[43]
* Gentoo KDE team[44], with 7 new bugs[45]
* media-video herd[46], with 6 new bugs[47]
* Television related Applications in Gentoo's Portage[48], with 6 new
bugs[49]
34. maintainer-wanted@gentoo.org
35.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-02-19&chfieldto=2006-02-26&assigned_to=maintainer-wanted@gentoo.org
36. amd64@gentoo.org
37.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-02-19&chfieldto=2006-02-26&assigned_to=amd64@gentoo.org
38. maintainer-needed@gentoo.org
39.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-02-19&chfieldto=2006-02-26&assigned_to=maintainer-needed@gentoo.org
40. gnome@gentoo.org
41.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-02-19&chfieldto=2006-02-26&assigned_to=gnome@gentoo.org
42. perl@gentoo.org
43.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-02-19&chfieldto=2006-02-26&assigned_to=perl@gentoo.org
44. kde@gentoo.org
45.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-02-19&chfieldto=2006-02-26&assigned_to=kde@gentoo.org
46. media-video@gentoo.org
47.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-02-19&chfieldto=2006-02-26&assigned_to=media-video@gentoo.org
48. media-tv@gentoo.org
49.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-02-19&chfieldto=2006-02-26&assigned_to=media-tv@gentoo.org


===============
6. GWN feedback
===============

Please send us your feedback[50] and help make the GWN better.

50. gwn-feedback@gentoo.org

===============================
7. GWN subscription information
===============================

To subscribe to the Gentoo Weekly Newsletter, send a blank email to
gentoo-gwn+subscribe@gentoo.org.

To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to
gentoo-gwn+unsubscribe@gentoo.org from the email address you are
subscribed under.

==================
8. Other languages
==================

The Gentoo Weekly Newsletter is also available in the following languages:

* Danish[51]
* Dutch[52]
* English[53]
* German[54]
* French[55]
* Korean[56]
* Japanese[57]
* Italian[58]
* Polish[59]
* Portuguese (Brazil)[60]
* Portuguese (Portugal)[61]
* Russian[62]
* Spanish[63]
* Turkish[64]
51. http://www.gentoo.org/news/da/gwn/gwn.xml
52. http://www.gentoo.org/news/nl/gwn/gwn.xml
53. http://www.gentoo.org/news/en/gwn/gwn.xml
54. http://www.gentoo.org/news/de/gwn/gwn.xml
55. http://www.gentoo.org/news/fr/gwn/gwn.xml
56. http://www.gentoo.org/news/ko/gwn/gwn.xml
57. http://www.gentoo.org/news/ja/gwn/gwn.xml
58. http://www.gentoo.org/news/it/gwn/gwn.xml
59. http://www.gentoo.org/news/pl/gwn/gwn.xml
60. http://www.gentoo.org/news/pt_br/gwn/gwn.xml
61. http://www.gentoo.org/news/pt/gwn/gwn.xml
62. http://www.gentoo.org/news/ru/gwn/gwn.xml
63. http://www.gentoo.org/news/es/gwn/gwn.xml
64. http://www.gentoo.org/news/tr/gwn/gwn.xml


Ulrich Plate <plate@gentoo.org> - Editor
Shyam Mani <fox2mike@gentoo.org> - Author
Tobias Scherbaum <dertobi123@gentoo.org> - Author
Tim Yamin <plasmaroo@gentoo.org> - Author


--
gentoo-gwn@gentoo.org mailing list