news March 2008

news@lists.fedoraproject.org

10 participants
29 discussions

Re: Fedora Weekly...
by Thomas Chung 06 Apr '08

06 Apr '08

On Mon, Mar 31, 2008 at 5:53 AM, pj <pj(a)cassens.com> wrote: > Just a quick thank you for the effort in producing the Fedora Weekly > News! Several people in my office are thankful for you contributions! > > > Thank you > > PJ Thank you for your feedback. I should really share the credit with other hardworking contributors. :) Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung

3 4

Fedora Weekly News Issue 126
by Thomas Chung 31 Mar '08

31 Mar '08

= Fedora Weekly News Issue 126 = Welcome to Fedora Weekly News Issue 126 for the week of March 24th, 2008. http://fedoraproject.org/wiki/FWN/Issue126 In Announcements, we have "F9 Beta release announcement", "Rawhide 20080328 Snapshot", "FUDCon Lodging", "Fedora Python SIG" and "Fedora Updates System" In Planet Fedora, we have "OS Wrangler and Server Developers still needed", "Reviewing toolchains — publican and /cvs/docs", "NetworkManager and mobile broadband", "Persistence of vision" and "Seek ye students" We are always looking for more writers to help us deliver timely information to the Fedora community. http://fedoraproject.org/wiki/NewsProject/Join. 1. Announcements 1. F9 Beta release announcement 2. Rawhide 20080328 Snapshot 3. FUDCon Lodging 4. Fedora Python SIG 5. Fedora Updates System 2. Planet Fedora 1. OS Wrangler and Server Developers still needed 2. Reviewing toolchains — publican and /cvs/docs 3. NetworkManager and mobile broadband 4. Persistence of vision 5. Seek ye students 3. Ambassadors 1. Ambassador Polo Shirts 2. Ambassador Talk at liberaMENTE 3. LinuxTag 2008 Fedora Ambassador Day 4. Fedora 9 Release Events Planning 4. Infrastructure 1. app2 rebuild 2. Fedora CA Project 5. Artwork 1. Fedora Art on the Linux Action Show 2. Final touches on waves 6. Security Week 1. Secure Browser? 2. Firefox 2.0.0.13 7. Security Advisories 1. Fedora 8 Security Advisories 2. Fedora 7 Security Advisories 8. Events and Meetings 1. Fedora Board Meeting Minutes 2008-03-25 2. Fedora Ambassadors Steering Committee Meeting 2008-03-28 3. Fedora Marketing Meeting 2008-03-27 4. Fedora Documentation Steering Committee Meeting 2008-03-26 5. Fedora Packaging Committee Meeting 2008-03-25 6. Fedora SIG KDE Meeting 2008-03-25 (Section 1) == Announcements == In this section, we cover announcements from Fedora Project. https://www.redhat.com/mailman/listinfo/fedora-announce-list Contributing Writer: ThomasChung === F9 Beta release announcement === JesseKeating announces in fedora-announce-list[1], "The Beta release is the point at which we really want and need the wider community's help with testing. Beta is a point of much greater stability in Fedora's development branch, but some fixes continue to occur to improve usability, performance, and stability. This release is great for early adopters and Linux enthusiasts! The Fedora 9 Beta boots on the majority of systems, and gives you an idea of how the final Fedora 9 will look and feel. Most importantly, we absolutely need community assistance to check features and provide feedback and bug reports, to help ensure that Fedora 9 is our best release ever." [1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00011.ht… === Rawhide 20080328 Snapshot === JesseKeating announces in fedora-announce-list[1], "As part of our development schedule, we are releasing a snapshot of Rawhide in iso and Live form. We are releasing these via bittorrent only as it is a much lighter weight method to get bits out the door than to go through our mirroring system." [1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00013.ht… === FUDCon Lodging === PaulFrields announces in fedora-announce-list[1], "As the co-organizers for the North American FUDCon F10, the illustrious Max Spevack and I are trying to get a handle on our true hotel needs for the event. To that end, I've made a couple changes to the FUDCon planning page so we can gather information on who needs lodging for the show." [1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00014.ht… === Fedora Python SIG === IgnacioVazquezAbrams announces in fedora-announce-list[1], "Come one, come all, to the brand new Fedora Project's Python SIG's mailing list. Regardless of whether you are a newbie or a grizzled veteran, a Sunday dabbler or a hardcore hacker, or merely curious what this is all about, all are welcome." [1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00012.ht… === Fedora Updates System === StewartAdam announces in fedora-announce-list[1], "Did you know you can help packagers test updates, give them feedback and even prevent a faulty package from being pushed into the repositories? The new Fedora Updates System (bodhi) integrates with the Fedora Build System (koji) and lets any user give feedback on a specific update, be it in updates-testing or in the stable repository." [1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00010.ht… (Section 2) == Planet Fedora == In this section, we cover a highlight of Planet Fedora - an aggregation of blogs from world wide Fedora contributors. http://planet.fedoraproject.org/ Contributing Writers: ThomasChung === OS Wrangler and Server Developers still needed === HavocPennington points out in his blog[1], "We've made good progress hiring UI developers and designers for LiTL. We may hire more on the UI side in a while (please do let us know if you'd be interested), but we have an initial team. In the meantime we are turning our focus to a couple other positions. See the official job descriptions and if you're interested, please email jobs at litl com." [1] http://log.ometer.com/2008-03.html#31 === Reviewing toolchains — publican and /cvs/docs === KarstenWade points out in his blog[1], "With all the attention on documentation toolchains in Fedora Docs, I wanted to provide a quick scope on the differences between the toolchain we've been using over the years, in /cvs/docs, and the newcomer, publican." [1] http://iquaid.org/2008/03/30/reviewing-toolchains-publican-and-cvsdocs/ === NetworkManager and mobile broadband === JonStanley points out in his blog[1], "As mentioned in previous posts, I had an outage on my home Internet connection. With mobile broadband support in NetworkManager being a feature of F9, I figured that I should probably test it. So, I just plugged in my card to my Fedora 9 laptop, and up came "Auto CDMA Network Connection" in the NetworkManager menu, selected it, and just like that, I'm on the Internet at Sprint-speed!" [1] http://jons-thoughts.blogspot.com/2008/03/networkmanager-and-mobile-broadba… === Persistence of vision === PaulFrields points out in his blog[1], "In between bouts of fighting one of my broken systems at home, I'm trying to spend some time working on our Single Source Summary page on the wiki. In doing that, and in talking to some other people about the Fedora 9 Beta, I found out that some of our keen new features may not have all the exposure they deserve — one of those is the work our resident ninja master Jeremy Katz has done on persistence for Live images." [1] http://marilyn.frields.org:8080/~paul/wordpress/?p=963 === Seek ye students === KarstenWade points out in his blog[1], "In the middle of the Summer of Code proposals process and it's been a mixed yet mostly good experience. We still have room for more proposals, so keep helping interested students and encourage them to get in a proposal for Fedora or JBoss.org. We'll know at the beginning of next week if the student deadline is extended; currently 31 March still stands as the application deadline." [1] http://iquaid.org/2008/03/29/seek-ye-students/ (Section 3) == Ambassadors == In this section, we cover Fedora Ambassadors Project. http://fedoraproject.org/wiki/Ambassadors Contributing Writer: JeffreyTadlock === Ambassador Polo Shirts === JoergSimon announced[1] to the Ambassadors mailing list that Ambassadors coming to Linuxtag 08 can order their Polo Shirts. The cost of the shirts are on the wiki, as well as the sign-up form[2]. [1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg00152… [2] http://fedoraproject.org/wiki/Ambassadors/PoloShirt === Ambassador Talk at liberaMENTE === LucaFoppiano announced[1] that Francesco Crippa and he will be participating in talks at liberaMENTA in Opera, Italy. All are invited to attend. The event has been added to the FedoraEvents page[2]. [1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg00194… [2] http://fedoraproject.org/wiki/FedoraEvents === LinuxTag 2008 Fedora Ambassador Day === FabianAffolter announced[1] the plans for the upcoming Fedora Ambassador Day being held before LinuxTag. The FAD will be held in Berlin on May 27, 2008. Country overviews have been requested for the meeting. A page[2] has been added to the wiki for additional planning. [1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg00212… [2] http://fedoraproject.org/wiki/FAD/FADLinuxTag2008 === Fedora 9 Release Events Planning === FrancescoUgolini has announced[1] the brainstorming session for Fedora 9 release events. This is in preparation for organizing release parties near the Fedora 9 release time. If you have ideas and suggestions for activities at the release parties, please contribute to the Release Events wiki page[2]. [1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg00215… [2] http://fedoraproject.org/wiki/Ambassadors/ReleaseEvents (Section 4) == Infrastructure == This section contains the discussion happening on the fedora-infrastructure-list http://fedoraproject.org/wiki/Infrastructure Contributing Writer: HuzaifaSidhpurwala === app2 rebuild === MikeMcGrath writes[1] on fedora-infrastructure-list Mike is going to rebuild app2 and stick some of our tg apps on there. Seth brought up an excellent point earlier in that our tg apps aren't really using any x86_64 code but the python objects they create can be 2-3x larger in memory. Since most of our performance issues with these apps is memory bloat (and ultimate swap) Mike is going to build it as an i686 box, and then compare memory foot prints after a week or two. [1] https://www.redhat.com/archives/fedora-infrastructure-list/2008-March/msg00… === Fedora CA Project === DennisGilmore writes[1] on fedora-infrastructure-list We have come to the realisation that this has to be done sooner rather than later. So Dennis put a call to revamp the CA infrastructure used in fedora[2]. [1] https://www.redhat.com/archives/fedora-infrastructure-list/2008-March/msg00… [2] https://fedorahosted.org/fedora-infrastructure/ticket/466 (Section 5) == Artwork == In this section, we cover Fedora Artwork Project. http://fedoraproject.org/wiki/Artwork Contributing Writer: NicuBuculei === Fedora Art on the Linux Action Show === The Fedora Art Team leader, MairinDuffy, was interviewed in for the latest edition of the Linux Action Show[1], a segment about 20 minutes long, covering the status of the Fedora 9 graphics, the team organisation and projects, its relations with the larger Fedora project and with Red Hat and much more. The interview was not very prominent in the Fedora universe and the team busy with nailing the last details of the upcoming theme, so NicuBuculei express his satisfaction about interview's outcome on the list[2]. [1] http://www.linuxactionshow.com/?p=176 (start at minute 25:00) [2] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00194.html === Final touches on waves === MatthiasClasen, from the Desktop team asks[1] about the status of the Fedora 9 art, considering the release schedule and the short remaining time. He is pointed[2] to the wiki[3], where the graphics resides and final versions have landed for almost all graphics: Syslinux, Anaconda, GRUB, Firstboot, RHGB. Only the desktop wallpaper and the GNOME splash screen (which is not shown by default anyway) needs some more touches. [1] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00204.html [2] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00208.html [3] http://fedoraproject.org/wiki/Artwork/F9Themes/Waves/Round3Final (Section 6) == Security Week == In this section, we highlight the security stories from the week in Fedora. Contributing Writer: JoshBressers === Secure Browser? === I ran across a story last week about researchers creating a secure web browser[1]. It seems there is work being done on a new secure web browser. The authors think that the current browsers suffer from fundamental design flaws that cannot be overcome. The notable thing is that from reading the article it's Open Source software being used. As the current offerings such as XULRunner and WebKit will allow various third parties to easily create niche browsers such as this. While this browser will likely never become a mainstream offering, it is nice that it can fill a hole in the current offerings. [1] http://www.eweek.com/index2.php?option=content&task=view&id=47212&pop=1&hid… === Firefox 2.0.0.13 === Firefox 2.0.0.13[1] was released this week. There's not much to say beyond, make sure you're running it. [1] http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox… (Section 7) == Security Advisories == In this section, we cover Security Advisories from fedora-package-announce. https://www.redhat.com/mailman/listinfo/fedora-package-announce Contributing Writer: ThomasChung === Fedora 8 Security Advisories === * php-pear-PhpDocumentor-1.4.1-2.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00551… * Miro-1.1.2-2.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00577… * yelp-2.20.0-8.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00578… * epiphany-2.20.3-2.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00579… * gtkmozembedmm-1.4.2.cvs20060817-19.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00580… * ruby-gnome2-0.16.0-21.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00581… * gnome-python2-extras-2.19.1-13.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00582… * epiphany-extensions-2.20.1-6.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00583… * liferea-1.4.13-2.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00584… * galeon-2.0.4-1.fc8.3 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00585… * devhelp-0.16.1-6.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00586… * gnome-web-photo-0.3-9.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00587… * openvrml-0.17.5-4.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00588… * chmsee-1.0.0-1.30.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00589… * kazehakase-0.5.3-5.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00590… * firefox-2.0.0.13-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00591… * blam-1.8.3-14.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00592… * namazu-2.0.18-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00654… * Perlbal-1.70-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00665… === Fedora 7 Security Advisories === * chmsee-1.0.0-1.30.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00552… * devhelp-0.13-15.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00553… * epiphany-2.18.3-8.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00554… * epiphany-extensions-2.18.3-8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00555… * firefox-2.0.0.13-1.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00556… * galeon-2.0.3-16.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00557… * gtkmozembedmm-1.4.2.cvs20060817-16.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00558… * Miro-1.1.2-2.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00559… * gnome-python2-extras-2.14.3-9.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00560… * kazehakase-0.5.3-5.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00561… * liferea-1.4.13-2.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00562… * openvrml-0.16.7-4.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00563… * ruby-gnome2-0.16.0-22.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00564… * yelp-2.18.1-10.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00565… * namazu-2.0.18-1.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00575… * Perlbal-1.70-1.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00672… (Section 8) == Events and Meetings == In this section, we cover event reports and meeting summaries from various Projects and SIGs. Contributing Writer: ThomasChung === Fedora Board Meeting Minutes 2008-03-25 === * http://fedoraproject.org/wiki/Board/Meetings/ === Fedora Ambassadors Steering Committee Meeting 2008-03-28 === * http://fedoraproject.org/wiki/Ambassadors/SteeringCommittee/Meetings/ === Fedora Marketing Meeting 2008-03-27 === * http://fedoraproject.org/wiki/Marketing/Meetings/Minutes === Fedora Documentation Steering Committee Meeting 2008-03-26 === * http://fedoraproject.org/wiki/DocsProject/SteeringCommittee/Meetings/Minutes === Fedora Packaging Committee Meeting 2008-03-25 === * http://fedoraproject.org/wiki/Packaging/Minutes === Fedora SIG KDE Meeting 2008-03-25 === * http://fedoraproject.org/wiki/SIGs/KDE/Meetings/ -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung

1 0

FWN infrastructure beat ready
by Huzaifa Sidhpurwala 31 Mar '08

31 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 $subject as always :) - -- Regards, Huzaifa Sidhpurwala, RHCE, CCNA (IRC: huzaifas) GnuPG Fingerprint: 3A0F DAFB 9279 02ED 273B FFE9 CC70 DCF2 DA5B DAE5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org iD8DBQFH8Ft0zHDc8tpb2uURAsHaAJwKYAZs+VluF3XosNKqxoVrn0sYbwCgiSQt G0n/eDhORHEimFBA0GV3gkU= =ef9J -----END PGP SIGNATURE-----

2 1

Ambassadors Beat Ready
by Jeffrey Tadlock 31 Mar '08

31 Mar '08

The Ambassadors News Beat has been posted: http://fedoraproject.org/wiki/FWN/Beats/Ambassadors Sorry for being so late - Monster Truck Nationals last night with the son! :)

2 1

On Vacation
by John Babich 31 Mar '08

31 Mar '08

Thomas: I am currently on vacation leave with limited time to attend meetings, edit the wiki and cover the Docs and Marketing beats. I have updated the vacation page at http://fedoraproject.org/wiki/Vacation to reflect this. My apologies for any inconvenience this may cause. Best Regards, John Babich Beat Writer, Docs and Marketing

2 1

FWN: Art Beat ready
by Nicu Buculei 28 Mar '08

28 Mar '08

This week topics: - Fedora Art on the Linux Action Show - Final touches on waves -- nicu :: http://nicubunu.ro :: http://nicubunu.blogspot.com Cool Fedora wallpapers: http://fedora.nicubunu.ro/wallpapers/ Open Clip Art Library: http://www.openclipart.org my Fedora stuff: http://fedora.nicubunu.ro

2 1

Re: news.fedoraproject.org
by Paul W. Frields 27 Mar '08

27 Mar '08

On Tue, 2008-03-25 at 17:04 -0600, Jonathan Roberts wrote: > Evening all, > > We've been talking for a while about setting up a news.fedoraproject.org > site, for a number of different uses. Thanks to the hard work of Frank > Chiulli we now have a test install of Lyceum on publictest 1 for our use :) > Before moving forward with this, we need to deal with a number of issues: > > 1) What do we actually want to use the site for? > > My thoughts are that we use it for Fedora Weekly News, along with other > marketing stuff such as interviews and announcements - similar to what > press.redhat.com is. Agreed, and it doesn't ever hurt to reaggregate stuff either. > 2) Depending on the above, do we want to use Lyceum or Wordpress? Infra > would like us to have whatever solution we use packaged and yumable on > Fedora; Wordpress is already in while Lyceum needs packaging. As I > understand it Lyceum allows us to have multiple blogs and is what's used by > Red Hat Magazine. Wordpress only allows for the one blog, but would also > allow multiple authors/editors on a single blog (I think). One thing I would like to see, and which I mentioned to Seth Vidal at FUDCon in Raleigh in January, was a way for us to offer blogs as a service to our account holders. The HTTPS work that Frank has done was probably a key action in making that possible, but I'm not sure exactly how close that gets us. It wouldn't be too hard for us to act as an OpenID provider for our account holders either, which is another nice way of advertising and pushing open standards. -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ irc.freenode.net: stickster @ #fedora-docs, #fedora-devel, #fredlug

1 0

Re: news.fedoraproject.org
by Rahul Sundaram 25 Mar '08

25 Mar '08

Jonathan Roberts wrote: > Anyone is welcome to sign up and we can start adding people in different > roles to the Fedora News blog I created in Lyceum, but the URL for the > install is on another box...Rahul, Frank, can you help me out here? You want https://publictest1.fedoraproject.org/lyceum/portal.php Rahul

2 1

Fedora Weekly News Issue 125
by Thomas Chung 24 Mar '08

24 Mar '08

= Fedora Weekly News Issue 125 = Welcome to Fedora Weekly News Issue 125 for the week of March 17th, 2008. http://fedoraproject.org/wiki/FWN/Issue125 In Announcements, we have "Fedora 9 Beta slipped a few days", "Michael Tiemann's Speech Online" In Planet Fedora, we have "Fedora University Tour", "FUDCon Boston 2008 at the Red Hat Summit" and "Notacon 5" We are always looking for more writers to help us deliver timely information to the Fedora community. http://fedoraproject.org/wiki/NewsProject/Join. 1. Announcements 1. Fedora 9 Beta slipped a few days 2. Michael Tiemann's Speech Online 2. Planet Fedora 1. Fedora University Tour 2. FUDCon Boston 2008 at the Red Hat Summit 3. Notacon 5 3. Ambassadors 1. Media Distribution and GPL Compliance 2. Fedora 9 Release Day Parties 3. Ambassadors Needed for Several Events 4. Advisory Board 1. Google Summer of Code 2008 5. Infrastructure 1. Asterisk and Town Hall meeting 6. Artwork 1. Art Team Status 7. Security Week 1. Wells Fargo Online Safe-Deposit Box 2. CERT-FI archive file fuzzing 8. Security Advisories 1. Fedora 8 Security Advisories 2. Fedora 7 Security Advisories 9. Events and Meetings 1. Fedora Board Meeting Minutes 2008-03-18 2. Fedora Engineering Steering Committee Meeting 2008-03-20 3. Fedora Infrastructure Meeting (Log) 2008-03-20 4. Fedora Localization/Translation Meeting (Log) 2008-03-18 5. Fedora Release Engineering Meeting 2008-03-17 6. Fedora SIG EPEL Report Week 11/2008 7. Fedora SIG KDE Meeting 2008-03-18 8. Fedora SIG Store Meeting (Update) 2008-03-19 (Section 1) == Announcements == In this section, we cover announcements from Fedora Project. https://www.redhat.com/mailman/listinfo/fedora-announce-list Contributing Writer: ThomasChung === Fedora 9 Beta slipped a few days === JesseKeating announces in fedora-announce-list[1], "In order to give time for mirrors to sync up the Fedora 9 Beta bits, and to do some last minute testing, and to avoid releasing beta the day before a Holiday for a large part of the world, we have decided to delay the release of Fedora 9 Beta until Tuesday, March 25th." [1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00008.ht… === Michael Tiemann's Speech Online === PaulFrields announces in fedora-announce-list[1], "Part of Michael Tiemann's 'Fedora in the Enterprise' speech from FUDCon Raleigh 2008 is now available in Ogg Theora format on the Fedora torrent site." [1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00007.ht… (Section 2) == Planet Fedora == In this section, we cover a highlight of Planet Fedora - an aggregation of blogs from world wide Fedora contributors. http://fedoraproject.org/wiki/Planet Contributing Writers: ThomasChung === Fedora University Tour === JackAboutboul blogs[1] on The Red Hat/Fedora 2008 University Tour blog site: "Just arrived in Pittsburgh after a 5 hour travel ordeal which should have normally taken no more than 3 hours. Didn't faze me one bit though, because I'm running on pure adrenaline, PSYCHED for Carnegie-Mellon in a few hours. CMU faculty, students and staff and local geeks alike who are interested in being inspired and captivated please join me as I present "Crash: How a Billion Little Collisions Define Everything" at 5pm later today in Newell-Simon Hall." [1] http://fedorauniversity.wordpress.com/2008/03/24/there-he-goes/ === FUDCon Boston 2008 at the Red Hat Summit === PaulFrields points out in his blog[1], "If you or your employer is springing for attendance at the actual Summit itself, and you attended a previous Summit, you're eligible for a special alumni rate. Check your email from the last week and you should find a note from the Summit organizers with a special promotional code that will get you a substantial discount. (I just want to make sure no one misses the chance to save a little cash.) If you feel you should have received the email and didn't, let me know and I'll see if I can't get you fixed up." [1] http://marilyn.frields.org:8080/~paul/wordpress/?p=952 === Notacon 5 === JeffreyTadlock points out in his blog[1], Fedora has arranged to have a booth at the soon upcoming Notacon 5 in downtown Cleveland, Ohio. The event is held April 4th through the 6th and is described as "The Midwest's most unique hacker con and demo party rolled into one!" [1] http://jtadlock.wordpress.com/2008/03/21/fedora-at-notacon-5-cleveland-oh/ (Section 3) == Ambassadors == In this section, we cover Fedora Ambassadors Project. http://fedoraproject.org/wiki/Ambassadors Contributing Writer: JeffreyTadlock === Media Distribution and GPL Compliance === Fedora Project leader PaulFrields announced[1] guidelines on the Ambassadors mailing list for staying GPL compliant when distributing Fedora media at events. Paul made two main points in the email, the first being let people know the source code for the binaries on the CDs/DVDs is readily available at fedoraproject.org. The second was to be prepared to provide source on CDs/DVDs for people that want it on that form of media. Ambassadors can either make some source DVDs up prior to an event or be prepared to burn media at the booth if necessary. Fedora Ambassadors should read the announcement in its entirety for all of the details. [1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg00140… === Fedora 9 Release Day Parties === FrancescoUgolini invited[1] all Ambassadors to organize a release party or release event in their area around the time Fedora 9 is released at the end of April. These can be informal events with machines showing off the Fedora 9 release and include discussion between speakers and the public. If you are planning such an event Ambassador's can add it to the Fedora Events page. If an Ambassador needs assistance in organizing their release party please contact a FAmSCo member [3] for guidance. [1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg00145… [2] http://fedoraproject.org/wiki/FedoraEvents [3] http://fedoraproject.org/wiki/Ambassadors/SteeringCommittee/ === Ambassadors Needed for Several Events === There are several EMEA events that need an Ambassador to attend listed on the Fedora Events page [1]. These events include Augsburger Linux-Infotag in Augsburg, Germany; Grazer Linuxtage in Graz, Austria; Linux Days in Geneva, Switzerland and Open Source Expo in Karlsruhe, Germany. If you can help with any of these events please add your name to the owner column and contact a FAmSCo member for assistance. [1] http://fedoraproject.org/wiki/FedoraEvents [2] http://fedoraproject.org/wiki/Ambassadors/SteeringCommittee/ (Section 4) == Advisory Board == In this section, we cover discussion in Fedora Advisory Board. https://www.redhat.com/mailman/listinfo/fedora-advisory-board Contributing Writer: MichaelLarabel === Google Summer of Code 2008 === PatrickBarnes has announced that Fedora has been accepted as a mentoring organization in this summer's Google Summer of Code program for aspiring open-source student developers[1]. Fedora will be working along side JBoss and the other Red Hat projects. The list of ideas for this year's GSoC program can be found on the Fedora Wiki[2]. [1] https://www.redhat.com/archives/fedora-advisory-board/2008-March/msg00129.h… [2] http://fedoraproject.org/wiki/SummerCoding/2008/Ideas (Section 5) == Infrastructure == This section contains the discussion happening on the fedora-infrastructure-list http://fedoraproject.org/wiki/Infrastructure Contributing Writer: HuzaifaSidhpurwala === Asterisk and Town Hall meeting === PaulFrields writes[1] on fedora-infrastructure-list The Fedora Board should be doing another "town hall" style meeting on Tuesday April 1. In March we postponed plans until then to use Asterisk and Gstreamer to provide some sort of listening capability for community members. In the end there was an agreement on the fact that there should have been a ticket for things, rather than just asking for things on the list. [1] https://www.redhat.com/archives/fedora-infrastructure-list/2008-March/msg00… (Section 6) == Artwork == In this section, we cover Fedora Artwork Project. http://fedoraproject.org/wiki/Artwork Contributing Writer: NicuBuculei === Art Team Status === MairinDuffy send a message to the Fedora Art list[1] with a status update of the team. She talks about the default theme for Fedora 9, which was settled for Sulfuric Waves[3], access policy for the Art group in the Fedora Account System, issues with the release process, the website banner for the Beta release and a Linux action podcast interview. NicuBuculei adds[2] to the list two more items: media (CD/DVD) labels and a release counter for the website. [1] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00139.html [2] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00140.html [3] http://fedoraproject.org/wiki/Artwork/F9Themes/Waves/Round3Final (Section 7) == Security Week == In this section, we highlight the security stories from the week in Fedora. Contributing Writer: JoshBressers === Wells Fargo Online Safe-Deposit Box === http://www.sci-tech-today.com/news/Wells-Offers-Online-Safe-Deposit-Box/sto… It's no secret that even with a brick and mortar bank, you have to have a certain level of trust with a save-deposit box. But apart from a dishonest employee, the evildoers will have a rough time getting at your things. You would expect the bank to have at least, door locks, security cameras, motion detectors, and a big thick scary vault. With an online storage system you really don't have all that many lines of defense. Let's presume the tech guys aren't thieves, and there are no flaws that could be used to gain access to your account. That means that the only real way in is to steal your "key". In the physical world, that might be as difficult as targeting you, knocking you down in the street, rummaging through your pockets, and finding the bank key. Then all you have to do is trick the bank into letting you actually use the stolen key, and taking whatever unusually important things I have stowed away in my box. In the tech world, I suspect stealing keys would go something like this: Send out twelve billion phishing emails. Get some login credentials, steal their files. The article mentions RSA tokens, which would help considerably, but they seem to suggest they are optional. I would be quite hesitant to put much faith in such a system if it doesn't offer multi factor authentication. Like most things though, I suspect this is just a case of making people feel all warm and fuzzy, since they don't really understand what's going on anyhow. === CERT-FI archive file fuzzing === CERT-FI published a giant archive of fuzzed files last week. https://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html There are a couple of things that will need to be fixed in Fedora and RHEL, they are currently being worked on, but this really brings up a much bigger question. How is this a security advisory? They gave out an archive of millions of fuzzed files, the vast majority of which don't even trigger bugs in the software in question. I think fuzzing is extremely powerful, and is very useful for finding bugs and security issues. Until now, fuzzing has really focused on the tools that mangle the data, to produce data with errors and flaws that will trigger bugs. These tools are a dime a dozen at this point, so what CERT-FI did wasn't all that useful. It would have been far more useful had CERT-FI distributed their suite for generating the fuzzed files, or released a test runner. Currently, the hard part when fuzzing is actually running the tests. When something fails, it's helpful to know where and why it happened, and by the very nature of fuzzing, there will be many failures caused by the same bug. This also begs the question, what's coming next? Given what I've seen of fuzzing, I think it's beginning to reach the end of its extreme usefulness. Once fuzzing stops returning quick and easy results, I imagine most researchers will move on to something better for finding their flaws. It's in the best interest of security researchers to quickly and easily find security issues. This reminds me of strcpy usage a few years back. There were an incredible number of security bugs found back when nobody cared about how they handled strings. Most developers are now quite aware of this and the strcpy buffer overflows are rather uncommon. Modern compilers will now even complain about crummy string use. Fuzzing is really just finding bugs where developers don't verify user input. This is getting better, and eventually ensuring that user input is sane will likely just be common knowledge. It shall be interesting to see what clever researchers come up with next, but until then, keep up the fuzzing. (Section 8) == Security Advisories == In this section, we cover Security Advisories from fedora-package-announce. https://www.redhat.com/mailman/listinfo/fedora-package-announce Contributing Writer: ThomasChung === Fedora 8 Security Advisories === * asterisk-1.4.18.1-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438… * xine-lib-1.1.11-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00456… * libsilc-1.0.2-6.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00538… * krb5-1.6.2-14.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544… === Fedora 7 Security Advisories === * libsilc-1.0.2-6.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00513… * asterisk-1.4.18.1-1.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514… * krb5-1.6.1-9.fc7 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537… (Section 9) == Events and Meetings == In this section, we cover event reports and meeting summaries from various Projects and SIGs. Contributing Writer: ThomasChung === Fedora Board Meeting Minutes 2008-03-18 === * http://fedoraproject.org/wiki/Board/Meetings/2008-03-18 === Fedora Engineering Steering Committee Meeting 2008-03-20 === * http://fedoraproject.org/wiki/Extras/SteeringCommittee/Meeting-20080320 === Fedora Infrastructure Meeting (Log) 2008-03-20 === * https://www.redhat.com/archives/fedora-infrastructure-list/2008-March/msg00… === Fedora Localization/Translation Meeting (Log) 2008-03-18 === * https://www.redhat.com/archives/fedora-trans-list/2008-March/msg00095.html === Fedora Release Engineering Meeting 2008-03-17 === * http://fedoraproject.org/wiki/ReleaseEngineering/Meetings/2008-mar-17 === Fedora SIG EPEL Report Week 11/2008 === * http://fedoraproject.org/wiki/EPEL/Reports/Week11 === Fedora SIG KDE Meeting 2008-03-18 === * http://fedoraproject.org/wiki/SIGs/KDE/Meetings/2008-03-18 === Fedora SIG Store Meeting (Update) 2008-03-19 === * https://www.redhat.com/archives/fedora-marketing-list/2008-March/msg00108.h… -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung

1 0

infrastructure beat is ready
by Huzaifa Sidhpurwala 23 Mar '08

23 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 $subject. Thanks. - -- Regards, Huzaifa Sidhpurwala, RHCE, CCNA (IRC: huzaifas) GnuPG Fingerprint: 3A0F DAFB 9279 02ED 273B FFE9 CC70 DCF2 DA5B DAE5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org iD8DBQFH5yUWzHDc8tpb2uURAvDgAJ9byGXobiL6Vv1HGkBQmuL/VzXf4ACeNddj auFdXrIk6WsdsdYeIlDb4sg= =YtQT -----END PGP SIGNATURE-----

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

news March 2008