Gentoo Weekly Newsletter: 14 May 2007

1.  Gentoo developer moves

Moves

The following developers recently left the Gentoo project:

• Hubert Mercier (anigel)

Adds

The following developers recently joined the Gentoo project:

• none this week

Changes

The following developers recently changed roles within the Gentoo project:

• none this week

2.  Gentoo security

Lighttpd: Two Denials of Service

Two vulnerabilities have been discovered in Lighttpd, each allowing for a Denial of Service.

For more information, please see the GLSA Announcement

GIMP: Buffer overflow

GIMP is vulnerable to a buffer overflow which may lead to the execution of arbitrary code.

For more information, please see the GLSA Announcement

IPsec-Tools: Denial of Service

IPsec-Tools contains a vulnerability that allows a remote attacker to crash the IPsec tunnel.

For more information, please see the GLSA Announcement

LibXfont, TightVNC: Multiple vulnerabilities

Multiple vulnerabilities have been reported in libXfont and TightVNC, allowing for the execution of arbitrary code with root privileges.

For more information, please see the GLSA Announcement

MySQL: Two Denial of Service vulnerabilities

Two Denial of Service vulnerabilities have been discovered in MySQL.

For more information, please see the GLSA Announcement

PostgreSQL: Privilege escalation

PostgreSQL contains a vulnerability that could result in SQL privilege escalation.

For more information, please see the GLSA Announcement

ImageMagick: Multiple buffer overflows

Multiple integer overflows have been discovered in ImageMagick allowing for the execution of arbitrary code.

For more information, please see the GLSA Announcement

XScreenSaver: Privilege escalation

XScreenSaver allows local users to bypass authentication under certain configurations.

For more information, please see the GLSA Announcement

3.  Gentoo package moves

This section lists packages that have either been moved or added to the tree and packages that have had their "last rites" announcement given to be removed in the future. The package removals come from many locations, including the Treecleaners and various developers. Most packages which are listed under the Last Rites section are in need of some love and care and can remain in the tree if proper maintainership is established.

Removals:

Additions:

Last Rites:

4.  Bugzilla

Summary

• Statistics
• Closed bug ranking
• New bug rankings

Statistics

The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 06 May 2007 and 13 May 2007, activity on the site has resulted in:

• 670 new bugs during this period
• 437 bugs closed or resolved during this period
• 27 previously closed bugs were reopened this period
• 167 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
• 100 bugs marked as duplicates during this period

Of the 10023 currently open bugs: 12 are labeled 'blocker', 112 are labeled 'critical', and 354 are labeled 'major'.

Closed bug rankings

The developers and teams who have closed the most bugs during this period are:

• Python Gentoo Team, with 37 closed bugs
• Gentoo Release Team, with 21 closed bugs
• Mobile Herd, with 17 closed bugs
• Java team, with 17 closed bugs
• Gentoo Security, with 16 closed bugs
• Xavier Neys, with 12 closed bugs
• Davide Cendron, with 11 closed bugs
• Gentoo KDE team, with 11 closed bugs

New bug rankings

The developers and teams who have been assigned the most new bugs during this period are:

• Default Assignee for New Packages, with 21 new bugs
• AMD64 Project, with 19 new bugs
• Gentoo's Team for Core System packages, with 12 new bugs
• Alec Warner, with 10 new bugs
• PHP Bugs, with 6 new bugs
• Default Assignee for Orphaned Packages, with 6 new bugs
• Netmon Herd, with 5 new bugs
• Net-Mail Packages, with 5 new bugs

5.  GWN feedback

The GWN is staffed by volunteers and members of the community who submit ideas and articles. If you are interested in writing for the GWN, have feedback on an article that we have posted, or just have an idea or article that you would like to submit to the GWN, please send us your feedback and help make the GWN better.

6.  GWN subscription information

To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+subscribe@gentoo.org.

To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+unsubscribe@gentoo.org from the e-mail address you are subscribed under.

7.  Other languages

The Gentoo Weekly Newsletter is also available in the following languages:

• Chinese (Simplified)
• Dutch
• English
• German
• Greek
• French
• Korean
• Japanese
• Italian
• Polish
• Portuguese (Brazil)
• Portuguese (Portugal)
• Russian
• Slovak
• Spanish
• Turkish