Gentoo Weekly Newsletter: 30 July 2007
1.
Gentoo News
NVIDIA Drivers Update
Recently x11-drivers/nvidia-drivers has been updated to include all
available driver versions, including the one found in
x11-drivers/nvidia-legacy-drivers, as posted by Doug Goldstein on
Gentoo Planet. The nvidia-legacy-drivers package has been removed in
favor of the 71xx driver version now available in nvidia-drivers. In
accordance with this change, Josh Saddler
has updated the
NVIDIA guide.
While the NVIDIA drivers ebuild will perform some auto detection to ensure that
the right driver for your card gets installed, you may still need to mask later
versions to get the one that you need. Josh Saddler has updated the guide with
regards to this change, which can also be found in NVIDIA's hardware compatibility
list.
2.
Heard in the Community
forums.gentoo.org
Portato: A Portage GUI
Necoro announced a GTK+ based GUI for Portage:
Portato
in the forums (albeit in German). This GUI was designed to help users
when the CLI isn't sufficient. For example, when emerging a package with lots
of dependencies and USE flags. This is made easier to do with a graphical
front-end with the use of an Emerge Queue, which updates automatically and shows
dependencies. Necoro stated that Portato wasn't meant as a replacement for the
CLI tools but is more comfortable in various situations.
To get Portato, execute the following commands:
Code Listing 2.1: How to get Portato |
# layman -o http://portato.sf.net/layman.xml -S
# layman -o http://portato.sf.net/layman.xml -a portato
|
planet.gentoo.org
Planet Summer of Code 07
Steve Dibb announced the Gentoo Planet
Summer of Code 2007 site is up
and running. Like the other two Planets Gentoo hosts, the feeds are updated
hourly. If you are mentored by Gentoo for this year's Summer of Code and
interested in having your own weblog, please send your info to
Steve Dibb.
3.
Gentoo International
GUADEC 2007
This years GUADEC, the GNOME Users'
And Developers European Conference, was held at the UCE Birmingham
Conservatoire, in Birmingham, England, from Sunday 15th July, until Saturday
21st of July 2007. The talks were divided in different categories, focusing on
the future of GNOME, the preview and demonstration of existing technologies,
as well as brainstorming sessions.
Of the topics to be heard, there were several great discussions including the
GNOME Online Desktop, PyroDesktop, and interesting movement in the GTK+ area.
4.
Gentoo in the Press
Commandline.org (28, July 2007)
Search for Gentoo on many popular online Linux publications and it is easy to
find drama. Perhaps that is why this piece was a refreshing change. In a recent
post on Commandline.org, editor Zeth
shared his views on the SFC and Gentoo.
"The Software Freedom
Conservancy has offered to take care of all this non-technical stuff
(as covered by Grant Goodyear's blog
post
.) The SFC would take legal liability and abstract away the paper work
such as doing the accounts, claiming taxes back, interacting with government
and so on. Gentoo would be able leave at any time in the future, no strings
attached.
The Software Freedom Conservancy ... already performs this service for Samba,
Wine, and some other projects. To me this sounds like the ideal solution for
Gentoo as well.
Gentoo is run by a meritocratic community of developers. These developers are
some of the most highly skilled geeks in the world, and spend much of their
free time writing the ebuilds, fixing the bugs, compiling the LiveCDs,
developing Gentoo admin tools and so on. They have been selectively bred for
that and are great at that, so let them get on with it.
So let the SFC manage the paperwork, and let the superdevelopers get on with
what they do. As for the flamewars, it is all white heat. There are only three
ways to judge the health of Gentoo: ebuilds, ebuilds and ebuilds."
5.
Gentoo developer moves
Moves
The following developers recently left the Gentoo project:
Adds
The following developers recently joined the Gentoo project:
Changes
The following developers recently changed roles within the Gentoo project:
- Dimitry Bradt (diox) x86 Team
6.
Gentoo security
MPlayer: Multiple buffer overflows
Multiple vulnerabilities have been discovered in MPlayer, possibly allowing
for the remote execution of arbitrary code.
For more information, please see the
GLSA Announcement
NVClock: Insecure file usage
A vulnerability has been discovered in NVClock, allowing for the execution
of arbitrary code.
For more information, please see the
GLSA Announcement
GIMP: Multiple integer overflows
Multiple vulnerabilities have been discovered in GIMP, allowing for the
remote execution of arbitrary code.
For more information, please see the
GLSA Announcement
Festival: Privilege elevation
A vulnerability has been discovered in Festival, allowing for a local
privilege escalation.
For more information, please see the
GLSA Announcement
MIT Kerberos 5: Arbitrary remote code execution
Multiple vulnerabilities in MIT Kerberos 5 could potentially result in
remote code execution with root privileges by unauthenticated users.
For more information, please see the
GLSA Announcement
VLC media player: Format string vulnerabilities
A vulnerability has been discovered in VLC media player, allowing for the
remote execution of arbitrary code.
For more information, please see the
GLSA Announcement
Fail2ban: Denial of Service
Fail2ban is vulnerable to a Denial of Service attack.
For more information, please see the
GLSA Announcement
tcpdump: Integer overflow
A vulnerability has been discovered in tcpdump, allowing for the execution
of arbitrary code, possibly with root privileges.
For more information, please see the
GLSA Announcement
7.
Gentoo package moves
This section lists packages that have either been moved or added to the tree
and packages that have had their "last rites" announcement given to be removed
in the future. The package removals come from many locations, including the Treecleaners and various developers. Most
packages which are listed under the Last Rites section are in need of some love
and care and can remain in the tree if proper maintainership is established.
Removals:
Additions:
Last Rites:
8.
Bugzilla
Summary
Statistics
The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track
bugs, notifications, suggestions and other interactions with the
development team. Between 22 July 2007
and 29 July 2007, activity on the site has resulted in:
- 526 new bugs during this period
- 350 bugs closed or resolved during this period
- 25 previously closed bugs were reopened this period
- 92 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
- 83 bugs marked as duplicates during this period
Of the 9893 currently open bugs: 11 are labeled 'blocker', 110 are labeled
'critical', and 354 are labeled 'major'.
Closed bug rankings
The developers and teams who have closed the most bugs during this period are:
New bug rankings
The developers and teams who have been assigned the most new bugs during this
period are:
9.
GWN feedback
The GWN is staffed by volunteers and members of the community who submit ideas
and articles. If you are interested in writing for the GWN, have feedback on an
article that we have posted, or just have an idea or article that you would
like to submit to the GWN, please send us your feedback and help make the GWN
better.
10.
GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+unsubscribe@gentoo.org
from the e-mail address you are subscribed under.
11.
Other languages
The Gentoo Weekly Newsletter is also available in the following
languages:
|