Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=7d7e80e8611c26d418dfb727f1eb452003ff0842
commit 7d7e80e8611c26d418dfb727f1eb452003ff0842 Author: Russell Dickenson <[EMAIL PROTECTED]> Date: Tue May 27 23:02:24 2008 +1000 Frugalware newsletter issue 24 diff --git a/frugalware/images/interviews/krixhimself.jpg b/frugalware/images/interviews/krixhimself.jpg new file mode 100644 index 0000000..12a87e1 Binary files /dev/null and b/frugalware/images/interviews/krixhimself.jpg differ diff --git a/frugalware/images/interviews/krixhouse.jpg b/frugalware/images/interviews/krixhouse.jpg new file mode 100644 index 0000000..47ea86f Binary files /dev/null and b/frugalware/images/interviews/krixhouse.jpg differ diff --git a/frugalware/weeklynews/issue24.html b/frugalware/weeklynews/issue24.html new file mode 100755 index 0000000..d7e2116 --- /dev/null +++ b/frugalware/weeklynews/issue24.html @@ -0,0 +1,150 @@ +<h2>Table of Contents</h2> +<ul> + <li><a href="#welcome">Welcome</a></li> + <li><a href="#events">Events</a></li> + <li><a href="#interview">Frugalware's developer are people too!</a></li> + <li><a href="#tips">Tips and tricks</a></li> + <li><a href="#packages">Focus on package(s)</a></li> + <li><a href="#fixes">Bug fixes</a></li> + <li><a href="#security">Security announcements</a></li> + <li><a href="#about">About the newsletter</a></li> +</ul> + +<a name="welcome"></a> +<h2>Welcome</h2> +<p> + The newsletter's aim is to keep you up to date with what's happened recently in the world of the Linux distribution 'Frugalware'. +</p> +<p> + Features of this issue include: + <ul> + <li>Frugalware 0.9 "Solaria" pre1 released</li> + <li>Frugalware's developers are people too! - krix</li> + <li>Save money with pacman-g2, cron and wget</li> + <li>Focus On Package(s) - rxvt-unicode</li> + </ul> +</p> + +<a name="events"></a> +<h2>Events</h2> +<p> + Here's a selection of events which have occurred since the previous newsletter: +</p> +<ul> + <li> + <h3>Frugalware 0.9 "Solaria" pre1 released</h3> + <p>On 13 May 2008, vmiklos announced the release of "Frugalware 0.9pre1, the first technical preview of the upcoming 0.9 stable release." This is the first step toward the release of 0.9 - code name "Solaria". We need your help in testing to ensure that this is a quality release.</p> + </li> + <li> + <h3>Flaker Oats unmasked!</h3> + <p>In the previous newsletter I announced that Flaker Oats (and jedifox) continue packaging applications. While on the Frugalware IRC channel I found that in fact "Flaker Oats" is merely the email name of a wonderful person named James Buren, with an IRC nickname of "ryuo".</p> + </li> + <li> + <h3>Priyank is "studying for his exams"</h3> + <p>On 15 May 2008, Priyank announced that he'd be taking a break from his Frugalware duties for a month, allowing him to study for his exams. It seems odd coincidence that his announcement occurs around the time of the Indian Cricket League (ICL). This cricket tournament has attracted a lot of attention within those nations where it's a popular sport. Is the timing of Priyank's absence merely a coincidence or has he actually taken a break to watch cricket? When you add to this the fact that the ICL features female cheerleaders in skimpy outfits, suspicions become even stronger. On Priyank's return to Frugalware, we'll have to question him on the "results" - whether these were exam results or cricket results. :)</p> + </li> +</ul> + + +<a name="interview"></a> + <h2>Frugalware's developers are people too!</h2> + <p>In this feature of the newsletter, Frugalware's developers reveal a little about themselves. The aim is to show that "Frugalware's developers are people too!" I thank the developers for taking the time to answer the questions. There will be one interview per newsletter (until we run out of developers).</p> + + <h3>krix</h3> + <p>This issue's interview is with krix, whose main role in the Frugalware development team is support of the 64-bit compatibility. Please stand and hum the Hungarian national anthem while you read his interview.</p> + +<dl> + <dt><b>What's your name?</b></dt> + <dd><p>My name is Christian Hamar :)</p></dd> + <dt><b>What's your IRC nickname?</b></dt> + <dd><p>Well its 'krix' :)</p></dd> + <dt><b>In what country do you live?</b></dt> + <dd><p>I live in Hungary, in Kecskemet city</p></dd> + <dt><b>In what country were you born?</b></dt> + <dd><p>Same, I was born in Hungary but in Miskolc city :)</p></dd> + <dt><b>What do you like the most about where you live?</b></dt> + <dd><p>Huh. Good question. Well I like that my town is a medium sized town in Hungary with about 120,000 people living here. It's so "quiet" here :)</p></dd> + <dt><b>What do you do for the Frugalware project?</b></dt> + <dd><p>When I joined the Frugalware project I had just bought a new x86_64 based system (amd64) and I talked with vmiklos about porting Frugalware to -x86_64 archs. We had some discussion and we decided that I should start the porting project. Well I started it and finished it :) It was my biggest step (I mean in work) for Frugalware. Then I did packaging work, creating new packages from source, maintaining a bunch of programs (update, fix, etc). Actually I gained the GNOME package maintainership. I did some C based programming work to pacman2 package manager and then pacman3 (CVS), created package progress bars and other small things for it (check git if want to see a full list :) ) and did some work on pacman-g2 (which is a fork we know). Maybe that's all.</p> + + <p>Ah. I nearly forgot that I suggested an idea to vmiklos at the start of my development. I "forced" vmiklos to accept that we (Frugalware) need a build system which builds packages in a full chroot environment. To take care about system libs and others. He declined that in the first 1-2 round :) But then he saw that it's a powerful tool and is "needed" to create quality packages. And makes "life" easier :) That was an idea from me :)</p></dd> + <dt><b>What motivates you to work on Frugalware?</b></dt> + <dd><p>It's a hobby for me. Before Frugalware I did some packaging for a Hungarian based distro named UHU-Linux. I was a contributor there, not a developer (because that distro was developed by a company). I left them for various reasons. And I thought that I was missing something in the time that I was not working on something 'Linuxish*' :) Then I found Frugalware and there we go. I like packaking work, contributing, fixing and other things. It's totally a hobby :)</p></dd> + <dt><b>What do you do when you're not working on Frugalware?</b></dt> + <dd><p>I'm working in an IT business. Actually I'm a member of an IT team in my city's cityhall. Basically I'm administrating computers (even win98-winXP for clients and redhat* debian* - win2k3 servers) and solving user problems. I like this too. I like to help users, its a duuuty! :)</p> + <p>Well I like to go garden-parties with friends and other ppls :), I like to drive, I like billiards and doing such things. Darts maybe :) I like Jack Daniels of course :) Just ask any FW devel "What's krix's favorite drink?". You got a big two letter thing: JD :) I like to watching DVD's or movies, ah and I'm a big Doctor Who fan! :) Listening to music, typically RAP style, Tupac, Snoop. And I think there are other things I do, I just don't remember them now :D</p></dd> + <dt><b>What's the view from your front door?</b></dt> + <dd><p>Instead of showing you that, <a href="http://frugalware.org/images/interview/krixhouse.jpg">here's</a> a view from a window :) And <a href="http://frugalware.org/images/interview/krixhimself.jpg">here's</a> a photo of me.</p></dd> +</dl> + + +<a name="tips"></a> + <h2>Tips and tricks</h2> + <b>Disclaimer</b> - Be aware that the hints & tips provided here have NOT been tested and so come with no warranty. +<ul> + <li> + <h3>Save money with pacman-g2, cron and wget - submitted by 'phayz'</h3> + <p>Many ISPs offer two download limits per billing period - one for peak time and one for off-peak time. The aim is to encourage people to download outside peak times, easing the load on their network. If this applies to your ISP there's an easy way to update packages while taking advantage of the off-peak download limit. Two steps are involved - (1) run pacman-g2 with the 'p' option included so that it prints out a list of those packages needing to be downloaded, (2) schedule wget via cron, using the file output by pacman-g2 as the input to wget. For those who don't already know, cron is a means of scheduling an event and wget is a multipurpose, command-line download utility. Refer to their man pages for full details of each command.</p> + </li> +</ul> + <p>This section relies on your contributions! If have some tips and tricks that you would like to be shown in the newsletter, <b><u><i>please</i></u></b> post them on the forums in the Tips and Tricks section!</p> + + +<a name="packages"</a> +<h2>Focus On Package(s)</h2> + + <h3>rxvt-unicode</h3> + <p>This time the focus is on a terminal emulator named 'rxvt-unicode'. According the home page, "rxvt-unicode is a colour vt102 terminal emulator intended as an xterm(1) replacement for users who do not require features such as Tektronix 4014 emulation and toolkit-style configurability. As a result, rxvt-unicode uses much less swap space -- a significant advantage on a machine serving many X sessions." It's a vast improvment on xterm, especially for those who like their terminal emulator looking cool. Features include fake transparency, dimming of the content when rxvt-unicode loses focus, and perhaps most important, better font support. One feature is particularly interesting - line spacing. With this option you can add space between the lines, helping to make some fonts easier to read.</p> + + +<a name="fixes"></a> +<h2>Bug fixes</h2> + +<p> + A list of bugs closed since the previous newsletter is available <a href="http://bugs.frugalware.org/index.php?string=&project=1&type%5B%5D=&sev%5B%5D=&pri%5B%5D=&due%5B%5D=&reported%5B%5D=&cat%5B%5D=&status%5B%5D=closed&percent%5B%5D=&opened=&dev=&closed=&duedatefrom=&duedateto=&changedfrom=&changedto=&openedfrom=&openedto=&closedfrom=2008-05-09&closedto=&do=index&submit=">here</a>. +</p> + + +<a name="security"></a> +<h2>Security announcements</h2> +<p> + <b>Remember</b> - According to the normal support arrangements for Frugalware, the release of 0.8 ("Kalgan") means that support for the previous release has ended. This means that no further security or bug fixes will be released for Frugalware 0.7 ("Sayshell"). +</p> + +<p> + Here is a list of <a href="/security">security issues</a> which have been discovered and fixed in the 0.8 release since the previous newsletter. +</p> + +<ul> + <li>FSA462 - libxslt: A vulnerability has been reported in libxslt, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a vulnerable system. Please upgrade to libxslt-1.1.22-2kalgan1.</li> + <li>FSA461 - mysql: A security issue has been reported in MySQL, which can be exploited by malicious, local users to bypass certain security restrictions. Please upgrade to mysql-5.0.51-3kalgan1.</li> + <li>FSA460 - seamonkey: A vulnerability has been reported in Mozilla SeaMonkey, which can potentially be exploited by malicious people to compromise a user's system. Please upgrade to seamonkey-1.1.9-1kalgan2.</li> + <li>FSA459 - django: A vulnerability has been reported in Django, which can be exploited by malicious people to conduct cross-site scripting attacks. Please upgrade to django-0.96.2-1kalgan1.</li> + <li>FSA458 - asterisk: A vulnerability has been reported in Asterisk, which can be exploited by malicious people to cause a DoS (Denial of Service). Please upgrade to asterisk-1.4.19.2-1kalgan1.</li> + <li>FSA457 - kvm: A vulnerability has been reported in KVM, which can be exploited by malicious, local users to bypass certain security restrictions or cause a DoS (Denial of Service). Please upgrade to kvm-61-3kalgan1.</li> + <li>FSA456 - xemacs: Some security issues have been reported in XEmacs, which can be exploited by malicious, local users to perform certain actions with escalated privileges. Please upgrade to xemacs-21.4.21-2kalgan1.</li> + <li>FSA455 - qemu: A vulnerability has been reported in QEMU, which can be exploited by malicious, local users to bypass certain security restrictions. Please upgrade to qemu-0.9.1-3kalgan1.</li> + <li>FSA454 - chicken: A vulnerability been reported in Chicken, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system. Please upgrade to chicken-3.1.10-1kalgan1.</li> + <li>FSA453 - gnutls: Some vulnerabilities have been reported in GnuTLS, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise an application using the library. Please upgrade to gnutls-2.2.5-1kalgan1.</li> + <li>FSA452 - graphicsmagick: A security issue has been reported in GraphicsMagick, which can be exploited by malicious people to bypass certain security restrictions. Please upgrade to graphicsmagick-1.1.12-1kalgan1.</li> + <li>FSA451 - audacity: Viktor Griph has reported a security issue in Audacity, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or to delete arbitrary files and directories. Please upgrade to audacity-1.3.5-1kalgan1.</li> + <li>FSA450 - pngcrush: A vulnerability has been reported in Pngcrush, which can be exploited by malicious people to disclose potentially sensitive information or potentially compromise a user's system. Please upgrade to pngcrush-1.6.5-1kalgan1.</li> + <li>FSA449 - rdesktop: Some vulnerabilities have been reported in rdesktop, which can be exploited by malicious people to compromise a user's system. Please upgrade to rdesktop-1.6.0-1kalgan1.</li> + <li>FSA448 - php: Some vulnerabilities have been reported in PHP, where some have unknown impacts and others can be exploited by malicious users to bypass certain security restrictions, and potentially by malicious people to cause a DoS (Denial of Service) or to compromise a vulnerable system. Please upgrade to php-5.2.6-1kalgan1.</li> + <li>FSA447 - eterm: A security issue has been reported in Eterm, which can be exploited by malicious, local users to gain escalated privileges. Please upgrade to eterm-0.9.4-3kalgan1.</li> + <li>FSA446 - kdelibs: A vulnerability has been reported in KDE, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or to potentially gain escalated privileges. Please upgrade to kdelibs-3.5.9-2kalgan1.</li> + <li>FSA445 - kernel: A vulnerability has been reported in the Linux kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service). Please upgrade to kernel-2.6.24-4kalgan2.</li> + <li>FSA444 - thunderbird: Some vulnerabilities have been reported in Mozilla Thunderbird, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, or potentially compromise a user's system. Please upgrade to thunderbird-2.0.0.14-1kalgan1.</li> + <li>FSA443 - util-linux-ng: A weakness has been reported in util-linux-ng, which can be exploited by malicious people to manipulate certain data. Please upgrade to util-linux-ng-2.13.1-2kalgan1.</li> + <li>FSA442 - wordpress: Two vulnerabilities have been reported in WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and to compromise a vulnerable system. Please upgrade to wordpress-2.5.1-1kalgan1.</li> +</ul> +<a name="about"></a> +<h2>About the newsletter</h2> + <h3>Author</h3> + <p>The Frugalware newsletter is written and edited by Russell Dickenson (AKA phayz). Credit for the Frugalware distribution goes to the development team.</p> + <h3>Translations</h3> + <p>The newsletter is currently translated into French and Danish. The <a href="http://frugalware-fr.tuxfamily.org/forums/index.php?board=34.0">French translation</a> is provided by the French Frugalware community. The <a href="http://frugalware.dk/?cat=5">Danish translation</a> is provided by the Danish Frugalware community. Thanks to all those involved in providing and hosting these translations.</p> + <h3>Release</h3> + <p>To allow time for review and corrections, each newsletter is written ahead of its release date. Therefore it may not mention events which occured in the few days before its release - e.g. security fixes. To be sure that you've got the very latest information on these topics, go to the appropriate page of the Frugalware web site.</p> + <h3>Feedback</h3> + <p>If you have feedback about the Frugalware newsletter - whether good or bad - please provide it via the forums. Your feedback is valuable because we want the newsletter to meet the needs of Frugalware's users.</p> diff --git a/frugalware/xml/news.xml b/frugalware/xml/news.xml index 55f062e..6d24c23 100644 --- a/frugalware/xml/news.xml +++ b/frugalware/xml/news.xml @@ -22,6 +22,25 @@ Example: Mon, 07 Aug 2006 12:34:56 -0600 --> <news> <post> + <id>99</id> + <title>Frugalware Newsletter Issue 24</title> + <date>Tue, 27 May 2008 22:57:50 +1000</date> + <author>phayz</author> + <hidden>0</hidden> + <content><![CDATA[ + The newsletter's aim is to keep you up to date with what's happened recently in the world of Frugalware.<br /> + Features of this issue include: + <ul> + <li>Frugalware 0.9 "Solaria" pre1 released</li> + <li>Frugalware's developers are people too! - krix</li> + <li>Save money with pacman-g2, cron and wget</li> + <li>Focus On Package(s) - rxvt-unicode</li> + </ul> + You can read it <a href="/newsletter/24">here</a>. We hope you like it! + ]]> + </content> + </post> + <post> <id>98</id> <title>Frugalware 0.9pre1 (Solaria) released</title> <date>Tue, 13 May 2008 00:05:24 +0200</date> _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
