Gentoo Weekly Newsletter: 21 May 2007
1.
Gentoo News
Java browser plugins on amd64
Currently, there is no Java plugin available for 64-bit browsers. Sun does not
provide one yet, and it is unclear when they will. The Blackdown plugin is
broken for most users and had some security problems, so it was disabled
recently. Now, only Konqueror handles Java natively, because it calls the
binary directly. For Firefox, there is a workaround: Install the binary 32-bit
Firefox and 32-bit plugins.
Code Listing 1.1: Installing 32-bit Firefox and plugins |
# echo "app-emulation/emul-linux-x86-java nsplugin" >> /etc/portage/package.use
# emerge mozilla-firefox-bin emul-linux-x86-java
# eselect java-nsplugin set 32bit emul-linux-x86-java-1.5
|
The situation will only improve, when Sun or Blackdown release stable Java
plugins for the amd64 platform.
2.
Gentoo developer moves
Moves
The following developers recently left the Gentoo project:
Adds
The following developers recently joined the Gentoo project:
- Le "Robert" Zhang (r0bertz) Chinese GWN translations
Changes
The following developers recently changed roles within the Gentoo project:
3.
Gentoo security
Samba: Multiple vulnerabilities
Samba contains multiple vulnerabilities potentially resulting in the
execution of arbitrary code with root privileges.
For more information, please see the
GLSA Announcement
PhpWiki: Remote execution of arbitrary code
A vulnerability has been discovered in PhpWiki allowing for the remote
execution of arbitrary code.
For more information, please see the
GLSA Announcement
Apache mod_security: Rule bypass
A vulnerability has been discovered in mod_security, allowing a remote
attacker to bypass rules.
For more information, please see the
GLSA Announcement
PPTPD: Denial of Service attack
A vulnerability has been reported in PPTPD which could lead to a Denial of
Service.
For more information, please see the
GLSA Announcement
4.
Gentoo package moves
This section lists packages that have either been moved or added to the tree
and packages that have had their "last rites" announcement given to be removed
in the future. The package removals come from many locations, including the Treecleaners and various developers. Most
packages which are listed under the Last Rites section are in need of some love
and care and can remain in the tree if proper maintainership is established.
Removals:
Additions:
Last Rites:
Note:
Due to this edition being published late, the Last Rites section will not be
included.
|
5.
Bugzilla
Summary
Statistics
The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track
bugs, notifications, suggestions and other interactions with the
development team. Between 13 May 2007
and 20 May 2007, activity on the site has resulted in:
- 609 new bugs during this period
- 381 bugs closed or resolved during this period
- 25 previously closed bugs were reopened this period
- 113 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
- 102 bugs marked as duplicates during this period
Of the 9990 currently open bugs: 11 are labeled 'blocker', 109 are labeled
'critical', and 354 are labeled 'major'.
Closed bug rankings
The developers and teams who have closed the most bugs during this period are:
New bug rankings
The developers and teams who have been assigned the most new bugs during this
period are:
6.
GWN feedback
The GWN is staffed by volunteers and members of the community who submit ideas
and articles. If you are interested in writing for the GWN, have feedback on an
article that we have posted, or just have an idea or article that you would
like to submit to the GWN, please send us your feedback and help make the GWN
better.
7.
GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+unsubscribe@gentoo.org
from the e-mail address you are subscribed under.
8.
Other languages
The Gentoo Weekly Newsletter is also available in the following
languages:
|