Gentoo Weekly Newsletter: January 6th, 2003

Kurt Lieber  Editor
AJ Armstrong  Contributor
Brice Burgess  Contributor
Yuji Carlos Kosugi  Contributor
Rafael Cordones Marcos  Contributor
David Narayan  Contributor
Ulrich Plate  Contributor
Peter Sharp  Contributor
Mathy Vanvoorden  Dutch Translation
Tom Van Laerhoven  Dutch Translation
Nicolas Ledez  French Translation
Guillaume Plessis  French Translation
Eric St-Georges  French Translation
John Berry  French Translation
Martin Prieto  French Translation
Michael Kohl  German Translation
Steffen Lassahn  German Translation
Matthias Brandstetter  German Translation
Thomas Raschbacher  German Translation
Marco Mascherpa  Italian Translation
Claudio Merloni  Italian Translation
Ventura Barbeiro  Portuguese (Brazil) Translation
Lanark  Spanish Translation
Rafael Cordones Marcos  Spanish Translation

Updated 06 Jan 2003

1.  Gentoo News

Summary

Start the New Year with a Donation to the Gentoo Linux Project

As we enter the New Year, we invite everyone who has benefitted from their use of Gentoo Linux to make a donation to the Gentoo Project. Its through your generous donations that the Gentoo Project is able to have a presence at the upcoming LinuxWorld Expo. Donations also help to support other development efforts, such as sponsoring developers so they can work full time on Gentoo Linux. Donations can be made via PayPal as well as check.

Additionally, if you know of a company that may be interested in sponsoring the Gentoo Linux free software project through a regular monthly donation, please email Daniel Robbins directly. Among other things, corporate sponsorships allow Gentoo developers to work full time on Gentoo Linux.

New Gentoo Linux Prelinking Guide

A new Gentoo Linux Prelinking Guide has been posted. Prelinking can cut the startup times of applications, especially larger ones such as KDE and GNOME, by as much as 50% or more. Many Mandrake and RedHat users have sung the praises of prelinking and its effect on overall system speed, so it is certainly a welcome addition to Gentoo Linux.

Perl 5.8 and libperl

Recently, an issue was raised among the developers about how to effectively deal with Perl 5.8. Perl 5.8 uses a shared library (libperl) that is incompatible with earlier versions of Perl, including Perl 5.6.1. Users upgrading to Perl 5.8 could find any apps previously compiled with Perl 5.6.1 to now be broken given the libperl incompatiblity. The solution for Gentoo Linux is to numerate the various versions of libperl to allow multiple versions to coincide with each other. So, as an example:

This solution should allow the Perl 5.6.1 --> Perl 5.8 upgrade to proceed smoothly, and it will also serve as a solution for future binary compatibility problems.

Future improvements to Gentoo Linux in the works

While the current focus of the Gentoo developers is on getting Gentoo Linux 1.4_final out the door, that doesn't mean future improvements aren't also being discussed. In addition to the Gentoo Reference Platform, which is designed to establish a stable baseline for Gentoo Linux, formal in-house testing and approval of hardware may be on the horizon. This process, which would provide users of Gentoo a set of components known to work with Gentoo Linux, should help avid Gentoo users make future hardware purchasing decisions. In addition to hardware testing, there are some tantalizing improvements to Portage coming up as well, including:

Nick Jones (carpaski) is working on these Portage improvements as well as others and is quickly catching up on the backlog of Portage feature requests. While no firm timeline exists for delivery of these features, the future of Portage certainly looks bright.

2.  Gentoo Security

Summary

GLSA: leafnode

The leafnode NNTP server can be forced into an unterminated and unresponsive loop when a particular article is requested, causing the client to reconnect, creating a new process. Repitition of this cycle can make the entire system unresponsive.

GLSA: xpdf

The pdftops filter (included in Xpdf and CUPS) has an integer overflow bug that can be exploited remotely to gain the privileges of the target user or, in some circumstances, of the lp user.

GLSA: cups

Several vulnerabilities in the CUPS printing package (including the integer overflow noted above) permit a number of exploits, including an exploit of multiple vulnerabilities that permits root access to the file system. The exploits have been demonstrated and published.

New Security Bug Reports

The last two weeks saw many of the outstanding security bugs cleared with new releases of the affected packages. The following new security bugs have been posted:

3.  Heard In The Community

Web Forums

Selective rsync strategies

This discussion raises its head every few months, meaning it probably has a point. Some people wish to cut down on bandwidth usage when they synchronize their portage tree by eliminating packages or classes they definitely don't want, need or even imagine to install, ever. The discussion and a few DIY ideas how to cope with the problem:

PCMCIA Worries Anticipating Gentoo 1.4

A large number of forum regulars have begun expressing anxiety about the missing pcmcia_cs and yenta_socket PCMCIA kernel modules in the second release candidate, and by consequence, they fear, in the pending release of Gentoo 1.4. A handful of threads are dominated by users of laptops and notebooks without built-in NICs, who rely on PCMCIA for access to the Internet (and eventually to a successful Gentoo installation). Their worries are getting hard to overlook, and some appear to have given in and use alternative install methods:

It should be noted that the PCMCIA situation in linux in general is not that great. With two sets of drivers (stock kernel drivers and pcmcia-cs packages) that are incompatible with one another, ensuring support for all PCMCIA devices is a challenge. Gentoo developers are working on including support for both sets of drivers on the Gentoo Linux 1.4 LiveCD, which should allow the widest range of compatiblity for all laptop users.

If anyone has a spare laptop that they would be interested in donating to the Gentoo Linux project, this would help greatly in improving PCMCIA support on the LiveCDs. If you're interested in donating a laptop, please contact Daniel Robbins directly.

Overclockers beware!

Forum moderator Phong pretty much sums it up: Overclocking is a bad idea when all it does is break compilations for a mere 100 Mhz of performance gain on the CPU, less than 5 percent on most of today's x86 PCs.

gentoo-user

Round 689,554 of the Text Editor Holy War

There's nothing like starting off the New Year with a good flame war about text editors, and gentoo-user has been having a great one over the past few days. The festivities seem to have started with this post and proceeded from there. At last count, there were approximately 60 messages in response to this post and the war continues on.

New Docbook eclass solves SGML problems

Recent updates to the Docbook/SGML system in Gentoo caused some problems for some users. Matthew Turk (satai) posted a message that explains how to fix these issues, along with a link to a more detailed explanation.

Gentoo's supported hardware

Freeman Tan asked for a list of official 'gentoo supported hardware'. Those more familar with linux would agree with Tom von Schwerdtner's statement; "distro supported hardware is mostly a misconecption". The linux kernel provides support for hardware, and it is up to the distro's 'installer' to detect and add support for the present devices. Gentoo is unique in that it doesn't have a formal installer but rather aids the installee through the intimate process of setting up a linux system from scratch. Providing you're able to boot into this system, you'll be able to add support for your devices later. A google search for "[hardware] +linux" will generally send you in the right direction. The thread concludes that "no, there is no official gentoo supported hardware". However, as we noted above, formal in-house testing of hardware may be in the works for Gentoo Linux. Stay tuned.

How do I telnet into my new Gentoo box?

  First and foremost it should be known that telnet is "obsolete, broken, insecure, and should never be used". If you still want to live on the wild side, make sure netkit-telnetd has been emerged, and you have an inetd server setup. This discussion has detailed instructions. Secure Shell (sshd) is the highly recommended alternative to telnet and much easier to install.

gentoo-dev

USE Aware Emerge. Martin Svenningsson posted a very nifty patch to allow emerge to display which USE flags affect the compilation of each package!

Gentoo Stable Site Update.

Maik Schreiber posted an announcement with the updates done on the Gentoo Stable website: "Hi, a few updates to the Gentoo Stable site have been made: (1). The query page is now a little easier to use. For example, you get selection boxes where possible (category, arch etc.). (2). A new filter has been added: You can now filter on "Portage status on {x86, ppc, sparc, alpha} {is, is not} {stable, unstable/testing, does not work, unmarked}". (3). Various speed improvements regarding query have been made. [...]". Joachim Blaabjerg chipped in with "Are there any tools available that scans the system for packages that are merged and marked unstable (~), and submits those as "merged successfully on my system"? I know I have a lot of unstable packages on my system, but I haven't got the time to through all of them and submit them to the Gentoo-stable site." and Peter Ruskin sent in a script to do just that!

4.  Gentoo International

Gentoo UK Being Constituted

They're not exactly out of the starting blocks yet, but a handful of British Gentoo users seems determined to follow their French, German, Korean and Japanese counterparts' example in creating a more formal support network for Gentooistsn their country. The thread has just begun to gain momentum. In particular, they are looking for a catchy domain name, feel free to make suggestions...

Iberian Peninsula Tops Spanish community

If a forum poll is anything to go by, the vast majority of Spanish-speaking Gentooist comes from Spain. They're being followed by users in Argentina and Urugay, a few Mexicans and Spanish-speaking US citizens, but a rather large proportion of people lives in a place oddly called "other"...

More Gentoo Linux Users Everywhere: ZetaGrid

A Gentoo team has been formed for ZetaGrid , a distributed computing project sponsored by IBM Germany whose distinguishing technical feature is the secure Java kernel it provides, preventing access from outside and securing its communications. The current project is the verification of Riemann's Hypothesis : about 2500 computers are working on it, calculating about 2 billion zeroes of the Riemann zeta function each day. Sebastian Wedeniwski, the scientist who created ZetaGrid, hopes to use ZetaGrid's results to come up with a proof for the hypothesis. If he succeeds, he'll split the $1,000,000 prize from the Clay Mathematics Institute with the top 100 users; there are other prizes, including one awarded to the user whose computer finds a result disproving the hypothesis, if that happens instead. Tantive has made an ebuild for the client but it's still masked, for more information see Zetagrid - team: Gentoo Linux Users Everywhere.

5.  Portage Watch

Security Updates (see above)

The following stable packages were added to portage this week

Updates to notable packages

New USE variables

6.  Bugzilla

Summary

Statistics

The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track bugs, notifications, suggestions and other interactions with the development team. In the last 7 days, activity on the site has resulted in:

There are currently 1893 bugs open in bugzilla. Of these: 40 are labelled 'blocker', 74 are labelled 'critical', and 113 are labelled 'major'.

The developers and teams with the highest apparent bug-related workload are:

Please lend them (and the entire development team) your good thoughts, left-over turkey, and ongoing support.

Bugs of Note

Each week, we will single out a few bugs for special mention, because they have been provoking significant discussions, they are particularly problematic, they are amusing or simply because they struck our fancy. This week's featured bugs are (in no particular order):

7.  Tips and Tricks

Updating a Gentoo system

Most Gentoo users are familiar with the Portage system used to install software. One of the features that you may not be familiar with is that Portage can also update your entire system at once. This is known as an 'update world'.

Code Listing 7.1

# emerge --update world

Sometimes that doesn't get everything though. To make the upgrade even more complete, use the --deep option.

Code Listing 7.2

# emerge --update --deep world

This option calculates the dependencies of the dependencies to ensure that everything on your system is brought up to date.

8.  Moves, Adds and Changes

Moves

The following developers recently left the Gentoo team:

Adds

The following developers recently joined the Gentoo team:

Changes

The following developers recently changed roles within the Gentoo project.

9.  Subscribe to the GWN mailing list

Would you prefer to receive the GWN via email? Subscribe to our mailing list by sending a blank email to gentoo-gwn-subscribe@gentoo.org

10.  Contribute to GWN

Interested in contributing to the Gentoo Weekly Newsletter? Send us an email

11.  GWN Feedback

Please send us your feedback and help make GWN better.