Gentoo Logo

Gentoo Weekly Newsletter: 20 November 2006

Content:

1.  Gentoo News

Help test the new Bugzilla

The Gentoo infrastructure team have rolled out the new Bugzilla for two to four weeks of testing. They hope to have the new Bugzilla up and running in time for Christmas.

Important improvements include:

  • Newer version of Bugzilla from upstream
  • Much more database horse-power
  • Automatic failover between database machines
  • A much better backup system, which should increase availability at night

You can help test by using the new Bugzilla when you're searching for existing bugs. In lieu of pointing your browser to http://bugs.gentoo.org, use http://bugstest.gentoo.org, instead.

Note: This server is not running with production data. Any bugs you file will not be seen by any developers. Please file all bugs on the normal bug tracker.

If you find any bugs, please report them in the production Bugzilla, assigned to infra-bugs@gentoo.org, with 'bugstest' in the summary. Robin Johnson fears there may be some UTF-8 issues, so help from non-ASCII Gentoo-ers is particularly needed.

Thanks to Mike Doty, Robin Johnson, Lance Albertson, Ned Ludd, Jeff Forman, and Corey Shields for all their hard work. Thanks to GNi for hardware and colocation services to make it all run.

For more information, please read Robin's original gentoo-dev list announcement.

2.  Heard in the community

gentoo-user

Accidentally deleted contents of /sbin

In a horrifying wildcard accident, James Colby deleted the entire contents of his /sbin directory. Quickwittedly, he did basic damage control by copying the contents of /sbin from a stage 3 tarball to his own denuded /sbin. He asked if he needed to do an emerge world to restore his /sbin to its former state.

Both Geistteufel and Bo Ørsted Andresen suggest ways to determine which packages actually had files residing in /sbin and then re-emerging them. Geistteufel suggested running equery b /sbin as root. This would yield a list of each package with a file residing in /sbin. Each of these packages would then be re-emerged. Bo Ørsted Andresen's solution automated the process:

Code Listing 2.1: Bo Ørsted Andresen's Solution

# cd /var/db/pkg && emerge -va1 $(for pkg in */*; do cut -d' ' -f2 "${pkg}"/CONTENTS | grep -q '^/sbin/' && echo "=${pkg}"; done)

Responders agreed that re-emerging world would be excessive.

Using LINGUAS on a per package basis like with USE

Fernando Canizo has set both the English and Spanish LINGUAS flags in his system (LINGUAS="en es"). However, he'd prefer to decide on a package-by-package basis which language to use, similar to setting a flag in his /etc/portage/package.use file.

Bo Ørsted Andresen pointed out that Fernando could use the IUSE flags linguas_es and linguas_en like any other per-package flag in /etc/portage/package.use. This is because the LINGUAS flags were USE_EXPANDED to those IUSE flags anyway. He also provided a pointer to the relevant section of the devmanual.

gentoo-cluster

SC06 -- check out SiCortex

Donnie Berkholz invited all attendees at the recently-held SuperComputing 06 conference to visit the booth of SiCortex. SiCortex is developing two MIPS cluster products, one with 5,800 nodes and the other with 650 nodes. The clusters will run Gentoo.

Brian D. Ropers-Huilman reported that he'd already stopped by their booth and was impressed by an 8 TF cluster that consumed a mere 18KW. However, he wasn't sure when they were entering production nor if they were really using Gentoo.

Joel Martin, who works at SiCortex as well as volunteering for Gentoo as a developer, provided more information on their offerings. Within a few months, SiCortex will be offering a 5,832 processor (972 6-core nodes) with 8GB RAM-per-node at less than the US$2,000,000 price point. And it will definitely run Gentoo.

For more information, Joe pointed readers to SiCortex's whitepaper collection.

3.  Gentoo developer moves

Moves

The following developers recently left the Gentoo project:

  • none this week

Adds

The following developers recently joined the Gentoo project:

  • Rémi Cardona (remi) Gnome team

Changes

The following developers recently changed roles within the Gentoo project:

  • none this week

4.  Gentoo security

OpenSSH: Multiple Denial of Service vulnerabilities

Several Denial of Service vulnerabilities have been identified in OpenSSH.

For more information, please see the GLSA Announcement

GraphicsMagick: PALM and DCM buffer overflows

GraphicsMagick improperly handles PALM and DCM images, potentially resulting in the execution of arbitrary code.

For more information, please see the GLSA Announcement

RPM: Buffer overflow

RPM is vulnerable to a buffer overflow and possibly the execution of arbitrary code when opening specially crafted packages.

For more information, please see the GLSA Announcement

libpng: Denial of Service

A vulnerability in libpng may allow a remote attacker to crash applications that handle untrusted images.

For more information, please see the GLSA Announcement

WordPress: Multiple vulnerabilities

Flaws in WordPress allow a Denial of Service, the disclosure of user metadata and the overwriting of restricted files.

For more information, please see the GLSA Announcement

5.  Upcoming package removals

This is a list of packages that have been announced to be removed in the future. The package removals come from many locations, including the Treecleaners and various developers.

Last-Rites:

Package: Removal date: Contact:
app-laptop/pmud 13 Dec 06 Joseph Jezak
app-laptop/wmbatppc 13 Dec 06 Joseph Jezak
dev-ada/adabroker 14 Dec 06 George Shapovalov
sci-mathematics/gturing 15 Dec 06 Markus Dittrich
net-proxy/dansguardian-dgav 17 Dec 06 Alin Nastac
net-dialup/gigaset-isdn 18 Jan 07 Alin Nastac
dev-ada/adaopengl 14 Dec 06 George Shapovalov
dev-ada/adabindx 14 Dec 06 George Shapovalov

6.  Bugzilla

Summary

Statistics

The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 12 November 2006 and 19 November 2006, activity on the site has resulted in:

  • 776 new bugs during this period
  • 409 bugs closed or resolved during this period
  • 21 previously closed bugs were reopened this period
  • 148 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
  • 176 bugs marked as duplicates during this period

Of the 10911 currently open bugs: 27 are labeled 'blocker', 102 are labeled 'critical', and 479 are labeled 'major'.

Closed bug rankings

The developers and teams who have closed the most bugs during this period are:

New bug rankings

The developers and teams who have been assigned the most new bugs during this period are:

7.  GWN feedback

The GWN is staffed by volunteers and members of the community who submit ideas and articles. If you are interested in writing for the GWN, have feedback on an article that we have posted, or just have an idea or article that you would like to submit to the GWN, please send us your feedback and help make the GWN better.

8.  GWN subscription information

To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+subscribe@gentoo.org.

To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+unsubscribe@gentoo.org from the e-mail address you are subscribed under.

9.  Other languages

The Gentoo Weekly Newsletter is also available in the following languages:



Print

Page updated November 20, 2006

Summary: This is the Gentoo Weekly Newsletter for the week of 20 November 2006.

Ulrich Plate
Editor

Chris Atkinson
Author

Chris Gianelloni
Author

Donate to support our development efforts.

Copyright 2001-2014 Gentoo Foundation, Inc. Questions, Comments? Contact us.