2006.1 media available on the store
Starting today, the 2006.1 release of Gentoo Linux is available from the official Gentoo Store. If you are looking for a way to support Gentoo development, five dollars from every CD sale goes directly to the Gentoo Foundation. Besides the 2006.1 media, there are hats, stickers, mouse pads, shirts, sweatshirts, and even a Gentoo clock!
Openoffice.org template/clipart competition
Openoffice.org's Documentation Project is holding a competition for templates and clipart, to be included in future versions of Openoffice.org. The contest is being sponsored by WorldLabel.com and has several prizes to win. The goal of the project is to increase the amount and quality of OpenDocument formatted templates for Openoffice.org users. For more information, check out the OO.o Documentation Project's home page at http://documentation.openoffice.org/
Linuxparty.dk Roskilde 2006 was held on 22 September 2006 through 24 September 2006 in Roskilde, Denmark. Attending the meeting were four Gentoo developers and one former developer, as well as many Danish Gentoo users. Bryan Østergaard gave two talks. One was about being a part of a large open source project such as Gentoo, and the other was about SELinux.
Have you ever updated your world or system and walked away only to come back several hours later to find out the update did not complete because a package failed?
The following simple command list and bash 'until' command will let you update your world or system to completion and skip those packages that failed:
Code Listing 3.1: Using until to skip broken packages |
# sudo emerge -Du world || # until sudo emerge --resume --skipfirst; do # sudo emerge --resume --skipfirst; done |
Once the command list completes, you can find out which packages failed by running the following command:
Code Listing 3.2: Checking for failed packages |
# emerge -Dup world |
Warning: Under certain circumstances, this can yield an unusable system. Always check the output of emerge -Dup world prior to using this tip. |
The following developers recently left the Gentoo project:
The following developers recently joined the Gentoo project:
The following developers recently changed roles within the Gentoo project:
ImageMagick: Multiple Vulnerabilities
Multiple buffer overflows have been discovered in ImageMagick, which could potentially result in the execution of arbitrary code.
For more information, please see the GLSA Announcement
GnuTLS fails to handle excess data which could allow an attacker to forge a PKCS #1 v1.5 signature.
For more information, please see the GLSA Announcement
Tikiwiki: Arbitrary command execution
Tikiwiki contains a cross-site scripting (XSS) vulnerability as well as a second vulnerability which may allow remote execution of arbitrary code.
For more information, please see the GLSA Announcement
A flaw in the OpenSSH daemon allows remote unauthenticated attackers to cause a Denial of Service.
For more information, please see the GLSA Announcement
Opera fails to correctly verify certain signatures.
For more information, please see the GLSA Announcement
Mozilla Firefox: Multiple vulnerabilities
The Mozilla Foundation has reported numerous vulnerabilities in Mozilla Firefox, including one that may allow execution of arbitrary code.
For more information, please see the GLSA Announcement
DokuWiki: Shell command injection and Denial of Service
DokuWiki is vulnerable to shell command injection and Denial of Service attacks when using ImageMagick.
For more information, please see the GLSA Announcement
The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 24 September 2006 and 01 October 2006, activity on the site has resulted in:
Of the 11209 currently open bugs: 33 are labeled 'blocker', 122 are labeled 'critical', and 525 are labeled 'major'.
The developers and teams who have closed the most bugs during this period are:
The developers and teams who have been assigned the most new bugs during this period are:
Please send us your feedback and help make the GWN better.
8. GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+unsubscribe@gentoo.org from the e-mail address you are subscribed under.
The Gentoo Weekly Newsletter is also available in the following languages: