Gentoo Logo

Gentoo Weekly Newsletter: 30 July 2007

Content:

1.  Gentoo News

NVIDIA Drivers Update

Recently x11-drivers/nvidia-drivers has been updated to include all available driver versions, including the one found in x11-drivers/nvidia-legacy-drivers, as posted by Doug Goldstein on Gentoo Planet. The nvidia-legacy-drivers package has been removed in favor of the 71xx driver version now available in nvidia-drivers. In accordance with this change, Josh Saddler has updated the NVIDIA guide.

While the NVIDIA drivers ebuild will perform some auto detection to ensure that the right driver for your card gets installed, you may still need to mask later versions to get the one that you need. Josh Saddler has updated the guide with regards to this change, which can also be found in NVIDIA's hardware compatibility list.

2.  Heard in the Community

forums.gentoo.org

Portato: A Portage GUI

Necoro announced a GTK+ based GUI for Portage: Portato in the forums (albeit in German). This GUI was designed to help users when the CLI isn't sufficient. For example, when emerging a package with lots of dependencies and USE flags. This is made easier to do with a graphical front-end with the use of an Emerge Queue, which updates automatically and shows dependencies. Necoro stated that Portato wasn't meant as a replacement for the CLI tools but is more comfortable in various situations.

To get Portato, execute the following commands:

Code Listing 2.1: How to get Portato

# layman -o http://portato.sf.net/layman.xml -S
# layman -o http://portato.sf.net/layman.xml -a portato

planet.gentoo.org

Planet Summer of Code 07

Steve Dibb announced the Gentoo Planet Summer of Code 2007 site is up and running. Like the other two Planets Gentoo hosts, the feeds are updated hourly. If you are mentored by Gentoo for this year's Summer of Code and interested in having your own weblog, please send your info to Steve Dibb.

3.  Gentoo International

GUADEC 2007

This years GUADEC, the GNOME Users' And Developers European Conference, was held at the UCE Birmingham Conservatoire, in Birmingham, England, from Sunday 15th July, until Saturday 21st of July 2007. The talks were divided in different categories, focusing on the future of GNOME, the preview and demonstration of existing technologies, as well as brainstorming sessions.

Of the topics to be heard, there were several great discussions including the GNOME Online Desktop, PyroDesktop, and interesting movement in the GTK+ area.

4.  Gentoo in the Press

Commandline.org (28, July 2007)

Search for Gentoo on many popular online Linux publications and it is easy to find drama. Perhaps that is why this piece was a refreshing change. In a recent post on Commandline.org, editor Zeth shared his views on the SFC and Gentoo.

"The Software Freedom Conservancy has offered to take care of all this non-technical stuff (as covered by Grant Goodyear's blog post .) The SFC would take legal liability and abstract away the paper work such as doing the accounts, claiming taxes back, interacting with government and so on. Gentoo would be able leave at any time in the future, no strings attached.

The Software Freedom Conservancy ... already performs this service for Samba, Wine, and some other projects. To me this sounds like the ideal solution for Gentoo as well.

Gentoo is run by a meritocratic community of developers. These developers are some of the most highly skilled geeks in the world, and spend much of their free time writing the ebuilds, fixing the bugs, compiling the LiveCDs, developing Gentoo admin tools and so on. They have been selectively bred for that and are great at that, so let them get on with it.

So let the SFC manage the paperwork, and let the superdevelopers get on with what they do. As for the flamewars, it is all white heat. There are only three ways to judge the health of Gentoo: ebuilds, ebuilds and ebuilds."

5.  Gentoo developer moves

Moves

The following developers recently left the Gentoo project:

  • none this week

Adds

The following developers recently joined the Gentoo project:

  • none this week

Changes

The following developers recently changed roles within the Gentoo project:

  • Dimitry Bradt (diox) x86 Team

6.  Gentoo security

MPlayer: Multiple buffer overflows

Multiple vulnerabilities have been discovered in MPlayer, possibly allowing for the remote execution of arbitrary code.

For more information, please see the GLSA Announcement

NVClock: Insecure file usage

A vulnerability has been discovered in NVClock, allowing for the execution of arbitrary code.

For more information, please see the GLSA Announcement

GIMP: Multiple integer overflows

Multiple vulnerabilities have been discovered in GIMP, allowing for the remote execution of arbitrary code.

For more information, please see the GLSA Announcement

Festival: Privilege elevation

A vulnerability has been discovered in Festival, allowing for a local privilege escalation.

For more information, please see the GLSA Announcement

MIT Kerberos 5: Arbitrary remote code execution

Multiple vulnerabilities in MIT Kerberos 5 could potentially result in remote code execution with root privileges by unauthenticated users.

For more information, please see the GLSA Announcement

VLC media player: Format string vulnerabilities

A vulnerability has been discovered in VLC media player, allowing for the remote execution of arbitrary code.

For more information, please see the GLSA Announcement

Fail2ban: Denial of Service

Fail2ban is vulnerable to a Denial of Service attack.

For more information, please see the GLSA Announcement

tcpdump: Integer overflow

A vulnerability has been discovered in tcpdump, allowing for the execution of arbitrary code, possibly with root privileges.

For more information, please see the GLSA Announcement

7.  Gentoo package moves

This section lists packages that have either been moved or added to the tree and packages that have had their "last rites" announcement given to be removed in the future. The package removals come from many locations, including the Treecleaners and various developers. Most packages which are listed under the Last Rites section are in need of some love and care and can remain in the tree if proper maintainership is established.

Removals:

Package: Removal date: Contact:
net-libs/linc 27 Jul 2007 Gilles Dartiguelongue
games-fps/vendetta-online-bin 28 Jul 2007 Chris Gianelloni
dev-python/pyunit 28 Jul 2007 Ali Polatel
media-sound/bitscope 28 Jul 2007 Samuli Suominen
media-fonts/twmoefonts 29 Jul 2007 Ryan Hill
x11-misc/gclipper 29 Jul 2007 Samuli Suominen
x11-misc/gcolor 29 Jul 2007 Samuli Suominen
x11-misc/gwhere 29 Jul 2007 Samuli Suominen
x11-misc/ntodo 29 Jul 2007 Samuli Suominen
media-libs/allegromp3 29 Jul 2007 Samuli Suominen
net-www/mod_security 29 Jul 2007 Christian Heim
net-www/mod_watch 29 Jul 2007 Christian Heim
net-www/mod_roaming 29 Jul 2007 Christian Heim
net-www/mod_loopback 29 Jul 2007 Christian Heim
net-www/mod_ftpd 29 Jul 2007 Christian Heim
net-www/mod_bw 29 Jul 2007 Christian Heim
net-www/mod_log_sql 29 Jul 2007 Christian Heim
net-www/mod_layout 29 Jul 2007 Christian Heim
net-www/mod_limitipconn 29 Jul 2007 Christian Heim
net-www/mod_auth_ldap 29 Jul 2007 Benedikt Boehm
net-www/mod_fastcgi 29 Jul 2007 Benedikt Boehm
net-www/mod_ldap_userdir 29 Jul 2007 Christian Heim
net-www/mod_pcgi2 29 Jul 2007 Christian Heim
net-www/mod_scgi 29 Jul 2007 Christian Heim
net-www/mod_vdbh 29 Jul 2007 Christian Heim
net-www/mod_xslt 29 Jul 2007 Christian Heim
net-www/mod_transform 29 Jul 2007 Christian Heim
net-www/mod_auth_external 29 Jul 2007 Christian Heim
net-www/mod_auth_kerb 29 Jul 2007 Christian Heim
net-www/mod_auth_mysql 29 Jul 2007 Christian Heim
net-www/mod_auth_nufw 29 Jul 2007 Christian Heim
net-www/mod_auth_pam 29 Jul 2007 Christian Heim
net-www/mod_auth_pgsql 29 Jul 2007 Christian Heim
net-www/apache 29 Jul 2007 Christian Heim
net-www/pwauth 29 Jul 2007 Benedikt Boehm

Additions:

Package: Addition date: Contact:
www-apps/horde-webmail 26 Jul 2007 Mike Frysinger
www-apps/horde-jeta 26 Jul 2007 Mike Frysinger
sys-apps/v86d 26 Jul 2007 Michael Januszewski
media-video/qt-recordmydesktop 26 Jul 2007 Alexis Ballier
dev-haskell/hscolour 26 Jul 2007 Duncan Coutts
dev-haskell/hslogger 26 Jul 2007 Duncan Coutts
app-text/lcdf-typetools 26 Jul 2007 Alexis Ballier
net-mail/courierpassd 26 Jul 2007 Jurek Bartuszek
dev-java/ant-eclipse-ecj 27 Jul 2007 Joshua Nichols
app-text/djview4 27 Jul 2007 Alexis Ballier
games-rpg/vendetta-online-bin 28 Jul 2007 Chris Gianelloni
app-admin/eselect-fontconfig 28 Jul 2007 Ryan Hill
app-dicts/fantasdic 29 Jul 2007 Matsuu Takuto
dev-perl/Encode-Detect 29 Jul 2007 Christian Hartmann
www-apache/mod_security 29 Jul 2007 Christian Heim
www-apache/mod_watch 29 Jul 2007 Christian Heim
www-apache/mod_roaming 29 Jul 2007 Christian Heim
www-apache/mod_loopback 29 Jul 2007 Christian Heim
www-apache/mod_ftpd 29 Jul 2007 Christian Heim
www-apache/mod_bw 29 Jul 2007 Christian Heim
www-apache/mod_log_sql 29 Jul 2007 Christian Heim
www-apache/mod_layout 29 Jul 2007 Christian Heim
www-apache/mod_limitipconn 29 Jul 2007 Christian Heim
www-apache/mod_ldap_userdir 29 Jul 2007 Christian Heim
www-apache/mod_pcgi2 29 Jul 2007 Christian Heim
www-apache/mod_scgi 29 Jul 2007 Christian Heim
www-apache/mod_vdbh 29 Jul 2007 Christian Heim
www-apache/mod_xslt 29 Jul 2007 Christian Heim
www-apache/mod_transform 29 Jul 2007 Christian Heim
net-firewall/conntrack-tools 29 Jul 2007 Cédric Krier
www-apache/mod_auth_external 29 Jul 2007 Christian Heim
www-apache/mod_auth_kerb 29 Jul 2007 Christian Heim
www-apache/mod_auth_mysql 29 Jul 2007 Christian Heim
www-apache/mod_auth_nufw 29 Jul 2007 Christian Heim
www-apache/mod_auth_pam 29 Jul 2007 Christian Heim
www-apache/mod_auth_pgsql 29 Jul 2007 Christian Heim
www-servers/apache 29 Jul 2007 Christian Heim
www-apache/pwauth 29 Jul 2007 Benedikt Boehm

Last Rites:

Package: Removal date: Contact:
x11-misc/fsv 21 Aug 2007 Samuli Suominen
media-fonts/artwiz-fonts 23 Aug 2007 Ryan Hill
net-firewall/fireflier 24 Aug 2007 Markus Ullmann
net-misc/bird 25 Aug 2007 Tony Vroon
dev-lang/ezm3 26 Aug 2007 Mike Frysinger
media-sound/sonic-rainbow 27 Aug 2007 Samuli Suominen
www-apache/mod_xslt 29 Aug 2007 Benedikt Boehm
media-libs/janus 18 Sep 2007 Samuli Suominen
net-dialup/l2tpd 19 Sep 2007 Alin Năstac
app-cdr/cdrw-base 20 Sep 2007 Samuli Suominen

8.  Bugzilla

Summary

Statistics

The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 22 July 2007 and 29 July 2007, activity on the site has resulted in:

  • 526 new bugs during this period
  • 350 bugs closed or resolved during this period
  • 25 previously closed bugs were reopened this period
  • 92 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
  • 83 bugs marked as duplicates during this period

Of the 9893 currently open bugs: 11 are labeled 'blocker', 110 are labeled 'critical', and 354 are labeled 'major'.

Closed bug rankings

The developers and teams who have closed the most bugs during this period are:

New bug rankings

The developers and teams who have been assigned the most new bugs during this period are:

9.  GWN feedback

The GWN is staffed by volunteers and members of the community who submit ideas and articles. If you are interested in writing for the GWN, have feedback on an article that we have posted, or just have an idea or article that you would like to submit to the GWN, please send us your feedback and help make the GWN better.

10.  GWN subscription information

To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+subscribe@gentoo.org.

To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+unsubscribe@gentoo.org from the e-mail address you are subscribed under.

11.  Other languages

The Gentoo Weekly Newsletter is also available in the following languages:



Print

Page updated July 30, 2007

Summary: This is the Gentoo Weekly Newsletter for the week of 30 July 2007.

Chris Gianelloni
Editor

Chrissy Fullam
Assistant Editor

Davide Italiano
Author

Josh Saddler
Author

Ryan Hill
Author

John Alberts
Contributor

Donate to support our development efforts.

Copyright 2001-2014 Gentoo Foundation, Inc. Questions, Comments? Contact us.