Gentoo Weekly Newsletter: 19 February 2007
1.
Gentoo News
A warning about upcoming changes to ALSA
In the past days there were a few changes to two ALSA packages,
media-sound/alsa-firmware-1.0.14_rc2-r1 and
media-sound/alsa-tools-1.0.14_rc1-r1. These two ebuilds now make use of
the ALSA_CARDS variable to decide which firmwares to install and which tools to
build. The ALSA_CARDS was already being used by media-sound/alsa-driver
package, so users of that package should be already done, as they most likely
have that already set; for users using the in-kernel drivers, they should now
properly set that variable, also. Please see
/usr/portage/profiles/desc/alsa_cards.desc for a list of available
ALSA_CARDS values.
Note:
With ALSA_CARDS unset (or if you're not using any of the drivers that are
listed for alsa-firmware or alsa-tools), the two packages will still install a
minimal set of tools or firmwares, but you might not be needing them at all.
|
2.
Heard in the community
forums.gentoo.org
Why I don't care if you are dropping recommend of Gentoo
In a long forum post, chrisfeet tells the story of how Gentoo became his
favorite. Written as a rebuttal of sorts to the negative comments in
Why I'm
dropping recommendation of Gentoo he states that the elegance and
power of a Gentoo system is what draws him to it, even after
experiencing the user-friendliness of Ubuntu.
3.
Gentoo in the press
iWon News (16 Feb 2007)
Cuba's Cabinet also has urged a shift from proprietary software. The customs
service has gone to Linux and the ministries of culture, higher education and
communications are planning to do so, Rodriguez said. Students in his own
department are cooking up a version of Linux called Nova, based on the Gentoo
distribution of the operating system. The ministry of higher education is
developing its own distribution.
4.
Gentoo developer moves
Moves
The following developers recently left the Gentoo project:
Adds
The following developers recently joined the Gentoo project:
- Richard Brown (rbrown) QA/Ruby teams
Changes
The following developers recently changed roles within the Gentoo project:
5.
Gentoo Security
Samba: Multiple vulnerabilities
Multiple flaws exist in the Samba suite of programs, the most serious of
which could result in the execution of arbitrary code.
For more information, please see the
GLSA Announcement
ProFTPD: Local privilege escalation
A flaw in ProFTPD may allow a local attacker to obtain root privileges.
For more information, please see the
GLSA Announcement
Snort: Denial of Service
Snort contains a vulnerability in the rule matching algorithm that could
result in a Denial of Service.
For more information, please see the
GLSA Announcement
RAR, UnRAR: Buffer overflow
RAR and UnRAR contain a buffer overflow allowing the execution of arbitrary
code.
For more information, please see the
GLSA Announcement
Fail2ban: Denial of Service
A flaw in Fail2ban may allow remote attackers to deny access to arbitrary
hosts.
For more information, please see the
GLSA Announcement
BIND: Denial of Service
ISC BIND contains two vulnerabilities allowing a Denial of Service under
certain conditions.
For more information, please see the
GLSA Announcement
Sun JDK/JRE: Execution of arbitrary code
Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) contain a
memory corruption flaw that allows the applets to gain elevated privileges
potentially leading to the execute of arbitrary code.
For more information, please see the
GLSA Announcement
AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities
Multiple unspecified vulnerabilities have been identified in Sun Java
Development Kit (JDK) and Sun Java Runtime Environment (JRE).
For more information, please see the
GLSA Announcement
6.
Gentoo package moves
This section lists packages that have either been moved or added to the tree
and packages that have had their "last rites" announcement given to be removed
in the future. The package removals come from many locations, including the Treecleaners and various developers. Most
packages which are listed under the Last Rites section are in need of some love
and care and can remain in the tree if proper maintainership is established.
Removals:
| Package: |
Removal date: |
Contact: |
| net-p2p/teknap |
12 Feb 2007 |
Raúl Porcel |
| app-emacs/w3 |
12 Feb 2007 |
Christian Faulhammer |
| app-emacs/weather |
12 Feb 2007 |
Christian Faulhammer |
| sys-cluster/gomd |
18 Feb 2007 |
Daniel Drake |
| sys-cluster/gomd-cvs |
18 Feb 2007 |
Daniel Drake |
| sys-cluster/openmosix-3dmon |
18 Feb 2007 |
Daniel Drake |
| sys-cluster/openmosix-3dmon-stats |
18 Feb 2007 |
Daniel Drake |
| sys-cluster/openmosix-user |
18 Feb 2007 |
Daniel Drake |
| sys-cluster/openmosixtest |
18 Feb 2007 |
Daniel Drake |
| sys-cluster/openmosixview |
18 Feb 2007 |
Daniel Drake |
| sys-cluster/openmosixwebview |
18 Feb 2007 |
Daniel Drake |
| sys-kernel/openmosix-sources |
18 Feb 2007 |
Daniel Drake |
Additions:
Last Rites:
Note:
Due to a mistake last week, the Last Rites section was not included. This week,
the GWN has 2 weeks worth of Last Rites listed below.
|
7.
Bugzilla
Summary
Statistics
The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track
bugs, notifications, suggestions and other interactions with the
development team. Between 11 February 2007
and 18 February 2007, activity on the site has resulted in:
- 749 new bugs during this period
- 450 bugs closed or resolved during this period
- 33 previously closed bugs were reopened this period
- 144 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
- 109 bugs marked as duplicates during this period
Of the 10450 currently open bugs: 17 are labeled 'blocker', 115 are labeled
'critical', and 436 are labeled 'major'.
Closed bug rankings
The developers and teams who have closed the most bugs during this period are:
New bug rankings
The developers and teams who have been assigned the most new bugs during this
period are:
8.
GWN feedback
The GWN is staffed by volunteers and members of the community who submit ideas
and articles. If you are interested in writing for the GWN, have feedback on an
article that we have posted, or just have an idea or article that you would
like to submit to the GWN, please send us your feedback and help make the GWN
better.
9.
GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+unsubscribe@gentoo.org
from the e-mail address you are subscribed under.
10.
Other languages
The Gentoo Weekly Newsletter is also available in the following
languages:
|