Mailing List Archive

---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of 23 October 2006.
---------------------------------------------------------------------------

==============
1. Gentoo news
==============

Gentoo Linux certified on Sun Fire T1000/T2000
----------------------------------------------

Gentoo Linux 2006.1 for SPARC is one of only two Linux distributions that
have been certified[1] by Sun to run on their Sun Fire Servers with
CoolThreads. These servers utilize the new UltraSPARC T1 processor. Sun
has worked with the Gentoo/SPARC team[2] to ensure support of their latest
servers in Gentoo Linux. Many thanks to Sun for also donating a Sun Fire
T2000 server for the Foundation to use to further development on
Gentoo/SPARC.

1. http://www.sun.com/servers/coolthreads/tnb/linux.jsp
2. http://www.gentoo.org/proj/en/base/sparc

=========================
2. Heard in the community
=========================

forums.gentoo.org
-----------------

Idea: Gentoo Automated Error Reporting/Resolution Client

ThinkingInBinary posted an idea for an automated error reporting system to
help out developers and users. The client would collect information after
a crash and submit it to the developers. Besides automatically collecting
data for the developers, the client could also give step-by-step
instructions to the user if the problem has already been resolved.

* http://forums.gentoo.org/viewtopic-t-507606.html

gentoo-user
-----------

want to ditch kopete

Roy Wright couldn't get rid of kopete-3.5.5-r1. When he tried to delete
it, portage insisted on bringing it back and it prevented him from
updating world. As a workaround, Neil Bothwick proposed:

---------------------------------------------------------------------------
| Code Listing 2.1: |
|Adding kopete to package.provided |
---------------------------------------------------------------------------
| |
|# mkdir -p /etc/portage/profile |
|# echo "kde-base/kopete-3.5.5-r1" >>/etc/portage/profile/package.provided|
| |
---------------------------------------------------------------------------

Roy reported the problem solved, but wondered what he'd done. User bn
explained that he'd convinced portage that kopete was installed even
though it wasn't. Haarm Geerts pointed out that this was a workaround
rather than a solution and that it might come back to haunt Roy someday in
the future.

* http://thread.gmane.org/gmane.linux.gentoo.user/172526

xorg-server update problem

james was trying to emerge xorg-server-1.1.1-r1. Compiling failed with
"Cannot write to '/usr/share/X11/xkb/compiled'".
/usr/share/X11/xkb/compiled was a symlink to /var/lib/xkb, a non-existent
file.

Alan McKinnon noted that running "equery belongs /var/lib/xkb" on his
system showed the file to have been installed by xkbcomp and suggested
recompiling it. James reported problem solved.

* http://thread.gmane.org/gmane.linux.gentoo.user/172393

gentoo-dev
----------

vim syntax global use flag

Caleb Cushing has suggested adding a vim-syntax global use flag to allow
users to more easily manage vim syntax ebuilds. For example, such a use
flag when set would make it so that when one installed x11-wm/fluxbox it
would also install app-vim/fluxbox-syntax as a dependency. The idea met
with positive reactions and Mike Kelly has opened a bug report[3] to track
the progress of implementing this on the about 12 affected packages.

3. http://bugs.gentoo.org/152275

* http://thread.gmane.org/gmane.linux.gentoo.devel/43442

support for i386

Mike Frysinger has brought to the attention of Gentoo developers that the
i386 sub-architecture is facing a difficult future. Starting with
glibc-2.6, upstream plans to require TLS and the i386 lacks the atomic
instructions required to support it. Debate is being had as to what
support, if any, Gentoo will be able to offer when this change occurs.
While glibc-2.5 can continue to be used (which has relevance to Release
Engineering which makes use of CHOST="i386-*" for its builds), once an
exploit of glibc-2.5 comes along, it could spell the end of i386.

* http://thread.gmane.org/gmane.linux.gentoo.devel/43417

=========================
3. Gentoo developer moves
=========================

Moves
-----

The following developers recently left the Gentoo project:

* Denis Dupeyron (calchan)

Adds
----

The following developers recently joined the Gentoo project:

* Matti Bickel (mabi) PPC
* Piotr Jaroszyński (peper) voip/mozilla
* Jurek Bartuszek (jurek) dotnet

Changes
-------

The following developers recently changed roles within the Gentoo project:

* none this week

==================
4. Gentoo security
==================

Seamonkey: Multiple vulnerabilities
-----------------------------------

The Seamonkey project has reported multiple security vulnerabilities in
the application.

For more information, please see the GLSA Announcement[4]

4. http://www.gentoo.org/security/en/glsa/glsa-200610-04.xml

CAPI4Hylafax fax receiver: Execution of arbitrary code
------------------------------------------------------

CAPI4Hylafax allows remote attackers to execute arbitrary commands.

For more information, please see the GLSA Announcement[5]

5. http://www.gentoo.org/security/en/glsa/glsa-200610-05.xml

Mozilla Network Security Service (NSS): RSA signature forgery
-------------------------------------------------------------

NSS fails to properly validate PKCS #1 v1.5 signatures.

For more information, please see the GLSA Announcement[6]

6. http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml

Python: Buffer Overflow
-----------------------

A buffer overflow in Python's "repr()" function can be exploited to cause
a Denial of Service and potentially allows the execution of arbitrary
code.

For more information, please see the GLSA Announcement[7]

7. http://www.gentoo.org/security/en/glsa/glsa-200610-07.xml

Cscope: Multiple buffer overflows
---------------------------------

Cscope is vulnerable to multiple buffer overflows that could lead to the
execution of arbitrary code.

For more information, please see the GLSA Announcement[8]

8. http://www.gentoo.org/security/en/glsa/glsa-200610-08.xml

libmusicbrainz: Multiple buffer overflows
-----------------------------------------

Multiple buffer overflows have been found in libmusicbrainz, which could
lead to a Denial of Service or possibly the execution of arbitrary code.

For more information, please see the GLSA Announcement[9]

9. http://www.gentoo.org/security/en/glsa/glsa-200610-09.xml

============================
5. Upcoming package removals
============================

This is a list of packages that have been announced to be removed in the
future. The package removals come from many locations, including the
Treecleaners[10] and various developers.

10. http://www.gentoo.org/proj/en/qa/treecleaners

Last Rites:
-----------

Package: Removal date: Contact: net-misc/klapjack 15 Nov 06 Alberto
Suárez López[11] sys-devel/odinmp 16 Nov 06 Olivier Crete[12]
www-apps/issue-tracker 19 Nov 06 Renat Lumpau[13] www-apps/back-end 19
Nov 06 Renat Lumpau[14] app-editors/xwpe 19 Nov 06 Alec Warner[15]
dev-ruby/rudl 20 Nov 06 Diego Pettenò[16]

11. bass@gentoo.org
12. tester@tester.ca
13. rl03@gentoo.org
14. rl03@gentoo.org
15. antarus@gentoo.org
16. flameeyes@gentoo.org

===========
6. Bugzilla
===========

Summary
-------

* Statistics
* Closed bug ranking
* New bug rankings

Statistics
----------

The Gentoo community uses Bugzilla (bugs.gentoo.org[17]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 15 October 2006 and 22 October 2006, activity on
the site has resulted in:

11. http://bugs.gentoo.org

* 901 new bugs during this period
* 546 bugs closed or resolved during this period
* 26 previously closed bugs were reopened this period
* 159 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this
period
* 167 bugs marked as duplicates during this period

Of the 11121 currently open bugs: 33 are labeled 'blocker', 116 are
labeled 'critical', and 494 are labeled 'major'.

Closed bug rankings
-------------------

The developers and teams who have closed the most bugs during this period
are:

* AMD64 Project[18], with 31 closed bugs[19]
* Gentoo Developer Relations Team[20], with 26 closed bugs[21]
* Gentoo Games[22], with 22 closed bugs[23]
* Default Assignee for Orphaned Packages[24], with 20 closed bugs[25]
* Gentoo Linux Gnome Desktop Team[26], with 16 closed bugs[27]
* Gentoo KDE team[28], with 15 closed bugs[29]
* Portage team[30], with 13 closed bugs[31]
* Gentoo Toolchain Maintainers[32], with 12 closed bugs[33]
18. amd64@gentoo.org
19.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=amd64@gentoo.org
20. devrel@gentoo.org
21.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=devrel@gentoo.org
22. games@gentoo.org
23.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=games@gentoo.org
24. maintainer-needed@gentoo.org
25.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=maintainer-needed@gentoo.org
26. gnome@gentoo.org
27.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=gnome@gentoo.org
28. kde@gentoo.org
29.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=kde@gentoo.org
30. dev-portage@gentoo.org
31.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=dev-portage@gentoo.org
32. toolchain@gentoo.org
33.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&chfield=bug_status&chfieldfrom=2006-10-15&chfieldto=2006-10-22&resolution=FIXED&assigned_to=toolchain@gentoo.org


New bug rankings
----------------

The developers and teams who have been assigned the most new bugs during
this period are:

* Default Assignee for Orphaned Packages[34], with 36 new bugs[35]
* Default Assignee for New Packages[36], with 26 new bugs[37]
* Python Gentoo Team[38], with 13 new bugs[39]
* Perl Devs @ Gentoo[40], with 11 new bugs[41]
* AMD64 Project[42], with 11 new bugs[43]
* Java team[44], with 10 new bugs[45]
* Gentoo Linux Gnome Desktop Team[46], with 10 new bugs[47]
* Alpha Porters[48], with 10 new bugs[49]
34. maintainer-needed@gentoo.org
35.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=maintainer-needed@gentoo.org
36. maintainer-wanted@gentoo.org
37.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=maintainer-wanted@gentoo.org
38. python@gentoo.org
39.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=python@gentoo.org
40. perl@gentoo.org
41.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=perl@gentoo.org
42. amd64@gentoo.org
43.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=amd64@gentoo.org
44. java@gentoo.org
45.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=java@gentoo.org
46. gnome@gentoo.org
47.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=gnome@gentoo.org
48. alpha@gentoo.org
49.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2006-10-15&chfieldto=2006-10-22&assigned_to=alpha@gentoo.org


===============
7. GWN feedback
===============

Please send us your feedback[50] and help make the GWN better.

44. gwn-feedback@gentoo.org

===============================
8. GWN subscription information
===============================

To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+subscribe@gentoo.org.

To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+unsubscribe@gentoo.org from the e-mail address you are
subscribed under.

==================
9. Other languages
==================

The Gentoo Weekly Newsletter is also available in the following languages:

* Chinese (Simplified)[51]
* Danish[52]
* Dutch[53]
* English[54]
* German[55]
* Greek[56]
* French[57]
* Korean[58]
* Japanese[59]
* Italian[60]
* Polish[61]
* Portuguese (Brazil)[62]
* Portuguese (Portugal)[63]
* Russian[64]
* Slovak[65]
* Spanish[66]
51. http://www.gentoo.org/news/zh_cn/gwn/gwn.xml
52. http://www.gentoo.org/news/da/gwn/gwn.xml
53. http://www.gentoo.org/news/nl/gwn/gwn.xml
54. http://www.gentoo.org/news/en/gwn/gwn.xml
55. http://www.gentoo.org/news/de/gwn/gwn.xml
56. http://www.gentoo.org/news/el/gwn/gwn.xml
57. http://www.gentoo.org/news/fr/gwn/gwn.xml
58. http://www.gentoo.org/news/ko/gwn/gwn.xml
59. http://www.gentoo.org/news/ja/gwn/gwn.xml
60. http://www.gentoo.org/news/it/gwn/gwn.xml
61. http://www.gentoo.org/news/pl/gwn/gwn.xml
62. http://www.gentoo.org/news/pt_br/gwn/gwn.xml
63. http://www.gentoo.org/news/pt/gwn/gwn.xml
64. http://www.gentoo.org/news/ru/gwn/gwn.xml
65. http://www.gentoo.org/news/sk/gwn/gwn.xml
66. http://www.gentoo.org/news/es/gwn/gwn.xml


Ulrich Plate <plate@gentoo.org> - Editor
Chris Atkinson <thirtyyearswar@mindspring.com> - Author
Josh Saddler <nightmorph@gentoo.org> - Author
Kyle Bishop <phnix@fastmail.net> - Author
Chris Gianelloni <wolf31o2@gentoo.org> - Author