Gentoo Weekly Newsletter: 20 November 2006
1.
Gentoo News
Help test the new Bugzilla
The Gentoo infrastructure team have rolled out the new Bugzilla for two
to four weeks of testing. They hope to have the new Bugzilla up and
running in time for Christmas.
Important improvements include:
- Newer version of Bugzilla from upstream
- Much more database horse-power
- Automatic failover between database machines
- A much better backup system, which should increase availability at
night
You can help test by using the new Bugzilla when you're searching for
existing bugs. In lieu of pointing your browser to
http://bugs.gentoo.org, use http://bugstest.gentoo.org,
instead.
Note:
This server is not running with production data. Any bugs you file will
not be seen by any developers. Please file all bugs on the normal
bug tracker.
|
If you find any bugs, please report them in the production Bugzilla, assigned to
infra-bugs@gentoo.org, with 'bugstest' in the summary. Robin Johnson fears
there may be some UTF-8 issues, so help from non-ASCII Gentoo-ers is
particularly needed.
Thanks to Mike Doty, Robin Johnson, Lance Albertson, Ned Ludd, Jeff
Forman, and Corey Shields for
all their hard work. Thanks to GNi for
hardware and colocation services to make it all run.
For more information, please read Robin's
original gentoo-dev list announcement.
2.
Heard in the community
gentoo-user
Accidentally deleted contents of /sbin
In a horrifying wildcard accident, James Colby deleted the entire
contents of his /sbin directory. Quickwittedly, he did basic damage
control by copying the contents of /sbin from a stage 3 tarball to
his own denuded /sbin. He asked if he needed to do an emerge
world to restore his /sbin to its former state.
Both Geistteufel and Bo Ørsted Andresen suggest ways to determine
which packages actually had files residing in /sbin and then
re-emerging them. Geistteufel suggested running equery b /sbin
as root. This would yield a list of each package with a file
residing in /sbin. Each of these packages would then be re-emerged.
Bo Ørsted Andresen's solution automated the process:
Code Listing 2.1: Bo Ørsted Andresen's Solution |
# cd /var/db/pkg && emerge -va1 $(for pkg in */*; do cut -d' ' -f2 "${pkg}"/CONTENTS | grep -q '^/sbin/' && echo "=${pkg}"; done)
|
Responders agreed that re-emerging world would be excessive.
Using LINGUAS on a per package basis like with USE
Fernando Canizo has set both the English and Spanish LINGUAS flags in his
system (LINGUAS="en es"). However, he'd prefer to decide on a
package-by-package basis which language to use, similar to setting a flag in
his /etc/portage/package.use file.
Bo Ørsted Andresen pointed out that Fernando could use the IUSE flags
linguas_es and linguas_en like any other per-package flag
in /etc/portage/package.use. This is because the LINGUAS flags were
USE_EXPANDED to those IUSE flags anyway. He also provided a pointer
to the relevant section of the devmanual.
gentoo-cluster
SC06 -- check out SiCortex
Donnie Berkholz invited all attendees
at the recently-held SuperComputing 06 conference to
visit the booth of SiCortex. SiCortex is developing two MIPS cluster products,
one with 5,800 nodes and the other with 650 nodes. The clusters will run Gentoo.
Brian D. Ropers-Huilman reported that he'd already stopped by their booth
and was impressed by an 8 TF cluster that consumed a mere 18KW. However, he
wasn't sure when they were entering production nor if they were really using
Gentoo.
Joel Martin, who works at SiCortex as
well as volunteering for Gentoo as a developer, provided more information on
their offerings. Within a few months, SiCortex will be offering a 5,832
processor (972 6-core nodes) with 8GB RAM-per-node at less than the
US$2,000,000 price point. And it will definitely run Gentoo.
For more information, Joe pointed readers to SiCortex's whitepaper
collection.
3.
Gentoo developer moves
Moves
The following developers recently left the Gentoo project:
Adds
The following developers recently joined the Gentoo project:
- Rémi Cardona (remi) Gnome team
Changes
The following developers recently changed roles within the
Gentoo project:
4.
Gentoo security
OpenSSH: Multiple Denial of Service vulnerabilities
Several Denial of Service vulnerabilities have been identified in OpenSSH.
For more information, please see the
GLSA Announcement
GraphicsMagick: PALM and DCM buffer overflows
GraphicsMagick improperly handles PALM and DCM images, potentially
resulting in the execution of arbitrary code.
For more information, please see the
GLSA Announcement
RPM: Buffer overflow
RPM is vulnerable to a buffer overflow and possibly the execution of
arbitrary code when opening specially crafted packages.
For more information, please see the
GLSA Announcement
libpng: Denial of Service
A vulnerability in libpng may allow a remote attacker to crash applications
that handle untrusted images.
For more information, please see the
GLSA Announcement
WordPress: Multiple vulnerabilities
Flaws in WordPress allow a Denial of Service, the disclosure of user
metadata and the overwriting of restricted files.
For more information, please see the
GLSA Announcement
5.
Upcoming package removals
This is a list of packages that have been announced to be removed in the
future. The package removals come from many locations, including the Treecleaners and various developers.
Last-Rites:
6.
Bugzilla
Summary
Statistics
The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track
bugs, notifications, suggestions and other interactions with the
development team. Between 12 November 2006
and 19 November 2006, activity on the site has resulted in:
- 776 new bugs during this period
- 409 bugs closed or resolved during this period
- 21 previously closed bugs were reopened this period
- 148 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
- 176 bugs marked as duplicates during this period
Of the 10911 currently open bugs: 27 are labeled 'blocker', 102 are labeled
'critical', and 479 are labeled 'major'.
Closed bug rankings
The developers and teams who have closed the most bugs during this period are:
New bug rankings
The developers and teams who have been assigned the most new bugs during this
period are:
7.
GWN feedback
The GWN is staffed by volunteers and members of the community who submit ideas
and articles. If you are interested in writing for the GWN, have feedback on an
article that we have posted, or just have an idea or article that you would
like to submit to the GWN, please send us your feedback and help make the GWN
better.
8.
GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+unsubscribe@gentoo.org
from the e-mail address you are subscribed under.
9.
Other languages
The Gentoo Weekly Newsletter is also available in the following
languages:
|