Gentoo Weekly Newsletter: 14 May 2007
1.
Gentoo developer moves
Moves
The following developers recently left the Gentoo project:
Adds
The following developers recently joined the Gentoo project:
Changes
The following developers recently changed roles within the Gentoo project:
2.
Gentoo security
Lighttpd: Two Denials of Service
Two vulnerabilities have been discovered in Lighttpd, each allowing for a
Denial of Service.
For more information, please see the
GLSA Announcement
GIMP: Buffer overflow
GIMP is vulnerable to a buffer overflow which may lead to the execution of
arbitrary code.
For more information, please see the
GLSA Announcement
IPsec-Tools: Denial of Service
IPsec-Tools contains a vulnerability that allows a remote attacker to crash
the IPsec tunnel.
For more information, please see the
GLSA Announcement
LibXfont, TightVNC: Multiple vulnerabilities
Multiple vulnerabilities have been reported in libXfont and TightVNC,
allowing for the execution of arbitrary code with root privileges.
For more information, please see the
GLSA Announcement
MySQL: Two Denial of Service vulnerabilities
Two Denial of Service vulnerabilities have been discovered in MySQL.
For more information, please see the
GLSA Announcement
PostgreSQL: Privilege escalation
PostgreSQL contains a vulnerability that could result in SQL privilege
escalation.
For more information, please see the
GLSA Announcement
ImageMagick: Multiple buffer overflows
Multiple integer overflows have been discovered in ImageMagick allowing for
the execution of arbitrary code.
For more information, please see the
GLSA Announcement
XScreenSaver: Privilege escalation
XScreenSaver allows local users to bypass authentication under certain
configurations.
For more information, please see the
GLSA Announcement
3.
Gentoo package moves
This section lists packages that have either been moved or added to the tree
and packages that have had their "last rites" announcement given to be removed
in the future. The package removals come from many locations, including the Treecleaners and various developers. Most
packages which are listed under the Last Rites section are in need of some love
and care and can remain in the tree if proper maintainership is established.
Removals:
Additions:
Last Rites:
4.
Bugzilla
Summary
Statistics
The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track
bugs, notifications, suggestions and other interactions with the
development team. Between 06 May 2007
and 13 May 2007, activity on the site has resulted in:
- 670 new bugs during this period
- 437 bugs closed or resolved during this period
- 27 previously closed bugs were reopened this period
- 167 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
- 100 bugs marked as duplicates during this period
Of the 10023 currently open bugs: 12 are labeled 'blocker', 112 are labeled
'critical', and 354 are labeled 'major'.
Closed bug rankings
The developers and teams who have closed the most bugs during this period are:
New bug rankings
The developers and teams who have been assigned the most new bugs during this
period are:
5.
GWN feedback
The GWN is staffed by volunteers and members of the community who submit ideas
and articles. If you are interested in writing for the GWN, have feedback on an
article that we have posted, or just have an idea or article that you would
like to submit to the GWN, please send us your feedback and help make the GWN
better.
6.
GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+unsubscribe@gentoo.org
from the e-mail address you are subscribed under.
7.
Other languages
The Gentoo Weekly Newsletter is also available in the following
languages:
|