Board public meeting, 2008-04-01 UTC 1800 (ERRATUM)
by Paul W. Frields
On Mon, 2008-03-31 at 16:24 -0400, Paul W. Frields wrote:
> Apologies for the late notice:
And for the erratum.
The first topic in the meeting, on which the Board will take questions,
is the spin policy. We will have a short discussion and then open up
for questions on that topic. After that, maybe 15-20 minutes total --
we'll move on to an open floor for other questions.
Thanks again and we look forward to seeing you there.
Paul
16 years
Fedora Weekly News Issue 126
by Thomas Chung
= Fedora Weekly News Issue 126 =
Welcome to Fedora Weekly News Issue 126 for the week of March 24th, 2008.
http://fedoraproject.org/wiki/FWN/Issue126
In Announcements, we have "F9 Beta release announcement", "Rawhide
20080328 Snapshot", "FUDCon Lodging", "Fedora Python SIG" and "Fedora
Updates System"
In Planet Fedora, we have "OS Wrangler and Server Developers still
needed", "Reviewing toolchains — publican and /cvs/docs",
"NetworkManager and mobile broadband", "Persistence of vision" and
"Seek ye students"
We are always looking for more writers to help us deliver timely
information to the Fedora community.
http://fedoraproject.org/wiki/NewsProject/Join.
1. Announcements
1. F9 Beta release announcement
2. Rawhide 20080328 Snapshot
3. FUDCon Lodging
4. Fedora Python SIG
5. Fedora Updates System
2. Planet Fedora
1. OS Wrangler and Server Developers still needed
2. Reviewing toolchains — publican and /cvs/docs
3. NetworkManager and mobile broadband
4. Persistence of vision
5. Seek ye students
3. Ambassadors
1. Ambassador Polo Shirts
2. Ambassador Talk at liberaMENTE
3. LinuxTag 2008 Fedora Ambassador Day
4. Fedora 9 Release Events Planning
4. Infrastructure
1. app2 rebuild
2. Fedora CA Project
5. Artwork
1. Fedora Art on the Linux Action Show
2. Final touches on waves
6. Security Week
1. Secure Browser?
2. Firefox 2.0.0.13
7. Security Advisories
1. Fedora 8 Security Advisories
2. Fedora 7 Security Advisories
8. Events and Meetings
1. Fedora Board Meeting Minutes 2008-03-25
2. Fedora Ambassadors Steering Committee Meeting 2008-03-28
3. Fedora Marketing Meeting 2008-03-27
4. Fedora Documentation Steering Committee Meeting 2008-03-26
5. Fedora Packaging Committee Meeting 2008-03-25
6. Fedora SIG KDE Meeting 2008-03-25
(Section 1)
== Announcements ==
In this section, we cover announcements from Fedora Project.
https://www.redhat.com/mailman/listinfo/fedora-announce-list
Contributing Writer: ThomasChung
=== F9 Beta release announcement ===
JesseKeating announces in fedora-announce-list[1],
"The Beta release is the point at which we really want and need the wider
community's help with testing. Beta is a point of much greater
stability in Fedora's development branch, but some fixes continue to
occur to improve usability, performance, and stability. This release is
great for early adopters and Linux enthusiasts! The Fedora 9 Beta boots
on the majority of systems, and gives you an idea of how the final
Fedora 9 will look and feel. Most importantly, we absolutely need
community assistance to check features and provide feedback and bug
reports, to help ensure that Fedora 9 is our best release ever."
[1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00011....
=== Rawhide 20080328 Snapshot ===
JesseKeating announces in fedora-announce-list[1],
"As part of our development schedule, we are releasing a snapshot of
Rawhide in iso and Live form. We are releasing these via bittorrent
only as it is a much lighter weight method to get bits out the door than
to go through our mirroring system."
[1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00013....
=== FUDCon Lodging ===
PaulFrields announces in fedora-announce-list[1],
"As the co-organizers for the North American FUDCon F10, the illustrious
Max Spevack and I are trying to get a handle on our true hotel needs for
the event. To that end, I've made a couple changes to the FUDCon
planning page so we can gather information on who needs lodging for the
show."
[1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00014....
=== Fedora Python SIG ===
IgnacioVazquezAbrams announces in fedora-announce-list[1],
"Come one, come all, to the brand new Fedora Project's Python SIG's
mailing list. Regardless of whether you are a newbie or a grizzled
veteran, a Sunday dabbler or a hardcore hacker, or merely curious what
this is all about, all are welcome."
[1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00012....
=== Fedora Updates System ===
StewartAdam announces in fedora-announce-list[1],
"Did you know you can help packagers test updates, give them feedback and
even prevent a faulty package from being pushed into the repositories?
The new Fedora Updates System (bodhi) integrates with the Fedora
Build System (koji) and lets any user give feedback on a specific
update, be it in updates-testing or in the stable repository."
[1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00010....
(Section 2)
== Planet Fedora ==
In this section, we cover a highlight of Planet Fedora - an
aggregation of blogs from world wide Fedora contributors.
http://planet.fedoraproject.org/
Contributing Writers: ThomasChung
=== OS Wrangler and Server Developers still needed ===
HavocPennington points out in his blog[1],
"We've made good progress hiring UI developers and designers for LiTL.
We may hire more on the UI side in a while (please do let us know if
you'd be interested), but we have an initial team.
In the meantime we are turning our focus to a couple other positions.
See the official job descriptions and if you're interested, please
email jobs at litl com."
[1] http://log.ometer.com/2008-03.html#31
=== Reviewing toolchains — publican and /cvs/docs ===
KarstenWade points out in his blog[1],
"With all the attention on documentation toolchains in Fedora Docs, I
wanted to provide a quick scope on the differences between the
toolchain we've been using over the years, in /cvs/docs, and the
newcomer, publican."
[1] http://iquaid.org/2008/03/30/reviewing-toolchains-publican-and-cvsdocs/
=== NetworkManager and mobile broadband ===
JonStanley points out in his blog[1],
"As mentioned in previous posts, I had an outage on my home Internet
connection. With mobile broadband support in NetworkManager being a
feature of F9, I figured that I should probably test it. So, I just
plugged in my card to my Fedora 9 laptop, and up came "Auto CDMA
Network Connection" in the NetworkManager menu, selected it, and just
like that, I'm on the Internet at Sprint-speed!"
[1] http://jons-thoughts.blogspot.com/2008/03/networkmanager-and-mobile-broad...
=== Persistence of vision ===
PaulFrields points out in his blog[1],
"In between bouts of fighting one of my broken systems at home, I'm
trying to spend some time working on our Single Source Summary page on
the wiki. In doing that, and in talking to some other people about the
Fedora 9 Beta, I found out that some of our keen new features may not
have all the exposure they deserve — one of those is the work our
resident ninja master Jeremy Katz has done on persistence for Live
images."
[1] http://marilyn.frields.org:8080/~paul/wordpress/?p=963
=== Seek ye students ===
KarstenWade points out in his blog[1],
"In the middle of the Summer of Code proposals process and it's been a
mixed yet mostly good experience. We still have room for more
proposals, so keep helping interested students and encourage them to
get in a proposal for Fedora or JBoss.org. We'll know at the beginning
of next week if the student deadline is extended; currently 31 March
still stands as the application deadline."
[1] http://iquaid.org/2008/03/29/seek-ye-students/
(Section 3)
== Ambassadors ==
In this section, we cover Fedora Ambassadors Project.
http://fedoraproject.org/wiki/Ambassadors
Contributing Writer: JeffreyTadlock
=== Ambassador Polo Shirts ===
JoergSimon announced[1] to the Ambassadors mailing list that
Ambassadors coming to Linuxtag 08 can order their Polo Shirts. The
cost of the shirts are on the wiki, as well as the sign-up form[2].
[1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg001...
[2] http://fedoraproject.org/wiki/Ambassadors/PoloShirt
=== Ambassador Talk at liberaMENTE ===
LucaFoppiano announced[1] that Francesco Crippa and he will be
participating in talks at liberaMENTA in Opera, Italy. All are
invited to attend. The event has been added to the FedoraEvents
page[2].
[1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg001...
[2] http://fedoraproject.org/wiki/FedoraEvents
=== LinuxTag 2008 Fedora Ambassador Day ===
FabianAffolter announced[1] the plans for the upcoming Fedora
Ambassador Day being held before LinuxTag. The FAD will be held in
Berlin on May 27, 2008. Country overviews have been requested for the
meeting. A page[2] has been added to the wiki for additional
planning.
[1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg002...
[2] http://fedoraproject.org/wiki/FAD/FADLinuxTag2008
=== Fedora 9 Release Events Planning ===
FrancescoUgolini has announced[1] the brainstorming session for Fedora
9 release events. This is in preparation for organizing release
parties near the Fedora 9 release time. If you have ideas and
suggestions for activities at the release parties, please contribute
to the Release Events wiki page[2].
[1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg002...
[2] http://fedoraproject.org/wiki/Ambassadors/ReleaseEvents
(Section 4)
== Infrastructure ==
This section contains the discussion happening on the
fedora-infrastructure-list
http://fedoraproject.org/wiki/Infrastructure
Contributing Writer: HuzaifaSidhpurwala
=== app2 rebuild ===
MikeMcGrath writes[1] on fedora-infrastructure-list
Mike is going to rebuild app2 and stick some of our tg apps on there.
Seth brought up an excellent point earlier in that our tg apps aren't
really using any x86_64 code but the python objects they create can
be 2-3x larger in memory. Since most of our performance issues with
these apps is memory bloat (and ultimate swap) Mike is going to build
it as an i686 box, and then compare memory foot prints after a week or
two.
[1] https://www.redhat.com/archives/fedora-infrastructure-list/2008-March/msg...
=== Fedora CA Project ===
DennisGilmore writes[1] on fedora-infrastructure-list
We have come to the realisation that this has to be done sooner rather
than later. So Dennis put a call to revamp the CA infrastructure used
in fedora[2].
[1] https://www.redhat.com/archives/fedora-infrastructure-list/2008-March/msg...
[2] https://fedorahosted.org/fedora-infrastructure/ticket/466
(Section 5)
== Artwork ==
In this section, we cover Fedora Artwork Project.
http://fedoraproject.org/wiki/Artwork
Contributing Writer: NicuBuculei
=== Fedora Art on the Linux Action Show ===
The Fedora Art Team leader, MairinDuffy, was interviewed in for the
latest edition of the Linux Action Show[1], a segment about 20 minutes
long, covering the status of the Fedora 9 graphics, the team
organisation and projects, its relations with the larger Fedora
project and with Red Hat and much more. The interview was not very
prominent in the Fedora universe and the team busy with nailing the
last details of the upcoming theme, so NicuBuculei express his
satisfaction about interview's outcome on the list[2].
[1] http://www.linuxactionshow.com/?p=176 (start at minute 25:00)
[2] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00194.html
=== Final touches on waves ===
MatthiasClasen, from the Desktop team asks[1] about the status of the
Fedora 9 art, considering the release schedule and the short remaining
time. He is pointed[2] to the wiki[3], where the graphics resides and
final versions have landed for almost all graphics: Syslinux,
Anaconda, GRUB, Firstboot, RHGB. Only the desktop wallpaper and the
GNOME splash screen (which is not shown by default anyway) needs some
more touches.
[1] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00204.html
[2] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00208.html
[3] http://fedoraproject.org/wiki/Artwork/F9Themes/Waves/Round3Final
(Section 6)
== Security Week ==
In this section, we highlight the security stories from the week in Fedora.
Contributing Writer: JoshBressers
=== Secure Browser? ===
I ran across a story last week about researchers creating a secure web
browser[1].
It seems there is work being done on a new secure web browser. The
authors think that the current browsers suffer from fundamental design
flaws that cannot be overcome. The notable thing is that from reading
the article it's Open Source software being used. As the current
offerings such as XULRunner and WebKit will allow various third
parties to easily create niche browsers such as this. While this
browser will likely never become a mainstream offering, it is nice
that it can fill a hole in the current offerings.
[1] http://www.eweek.com/index2.php?option=content&task=view&id=47212&pop=1&h...
=== Firefox 2.0.0.13 ===
Firefox 2.0.0.13[1] was released this week. There's not much to say
beyond, make sure you're running it.
[1] http://www.mozilla.org/projects/security/known-vulnerabilities.html#firef...
(Section 7)
== Security Advisories ==
In this section, we cover Security Advisories from fedora-package-announce.
https://www.redhat.com/mailman/listinfo/fedora-package-announce
Contributing Writer: ThomasChung
=== Fedora 8 Security Advisories ===
* php-pear-PhpDocumentor-1.4.1-2.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* Miro-1.1.2-2.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* yelp-2.20.0-8.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* epiphany-2.20.3-2.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* gtkmozembedmm-1.4.2.cvs20060817-19.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* ruby-gnome2-0.16.0-21.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* gnome-python2-extras-2.19.1-13.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* epiphany-extensions-2.20.1-6.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* liferea-1.4.13-2.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* galeon-2.0.4-1.fc8.3 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* devhelp-0.16.1-6.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* gnome-web-photo-0.3-9.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* openvrml-0.17.5-4.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* chmsee-1.0.0-1.30.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* kazehakase-0.5.3-5.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* firefox-2.0.0.13-1.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* blam-1.8.3-14.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* namazu-2.0.18-1.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg006...
* Perlbal-1.70-1.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg006...
=== Fedora 7 Security Advisories ===
* chmsee-1.0.0-1.30.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* devhelp-0.13-15.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* epiphany-2.18.3-8.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* epiphany-extensions-2.18.3-8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* firefox-2.0.0.13-1.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* galeon-2.0.3-16.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* gtkmozembedmm-1.4.2.cvs20060817-16.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* Miro-1.1.2-2.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* gnome-python2-extras-2.14.3-9.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* kazehakase-0.5.3-5.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* liferea-1.4.13-2.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* openvrml-0.16.7-4.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* ruby-gnome2-0.16.0-22.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* yelp-2.18.1-10.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* namazu-2.0.18-1.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* Perlbal-1.70-1.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg006...
(Section 8)
== Events and Meetings ==
In this section, we cover event reports and meeting summaries from
various Projects and SIGs.
Contributing Writer: ThomasChung
=== Fedora Board Meeting Minutes 2008-03-25 ===
* http://fedoraproject.org/wiki/Board/Meetings/
=== Fedora Ambassadors Steering Committee Meeting 2008-03-28 ===
* http://fedoraproject.org/wiki/Ambassadors/SteeringCommittee/Meetings/
=== Fedora Marketing Meeting 2008-03-27 ===
* http://fedoraproject.org/wiki/Marketing/Meetings/Minutes
=== Fedora Documentation Steering Committee Meeting 2008-03-26 ===
* http://fedoraproject.org/wiki/DocsProject/SteeringCommittee/Meetings/Minutes
=== Fedora Packaging Committee Meeting 2008-03-25 ===
* http://fedoraproject.org/wiki/Packaging/Minutes
=== Fedora SIG KDE Meeting 2008-03-25 ===
* http://fedoraproject.org/wiki/SIGs/KDE/Meetings/
--
Thomas Chung
http://fedoraproject.org/wiki/ThomasChung
16 years
Rawhide 20080328 Snapshot Released
by Jesse Keating
As part of our development schedule, we are releasing a snapshot of
Rawhide in iso and Live form. We are releasing these via bittorrent
only as it is a much lighter weight method to get bits out the door than
to go through our mirroring system. If you cannot use bittorrent we
apologize for the inconvenience.
http://torrent.fedoraproject.org/ has a section marked
Rawhide-20080328-Snapshot with CDs, DVD, and Live torrents. The Live
images were actually made from yesterday's rawhide as the attempt from
today's rawhide overflowed the CD size. The CDs and DVDs were made with
today's rawhide plus an updates.img inserted into them to resolve some
known issues we found in testing this morning.
Please us bugzilla to report any problems you find (after making sure
that somebody else hasn't already reported the issues). The Beta
release notes ( http://fedoraproject.org/en/f9-beta-relnotes ) still
mostly apply.
Thanks for all the testing!
--
Jesse Keating
Fedora -- All my bits are free, are yours?
16 years, 1 month
FUDCon Lodging
by Paul W. Frields
As the co-organizers for the North American FUDCon F10, the illustrious
Max Spevack and I are trying to get a handle on our true hotel needs for
the event. To that end, I’ve made a couple changes to the FUDCon
planning page so we can gather information on who needs lodging for the
show:
http://fedoraproject.org/wiki/FUDCon/FUDConF10#Attendees
PLEASE visit that page and add your information to the table of
attendees. We’re asking who’s attending the Summit as a customer so we
can weigh the logistics of using “shoulder dates”[1] at the Red Hat
Summit-affiliated hotels to house our FUDCon attendees. There are a
number of factors to consider, including but not limited to cost and
convenience to the FUDCon location.
We hope to have all hotel details and room blocks shortly. You can bank
on more news the moment that happens. If you need to list your
attendance as "tentative" or if you have special needs (or can offer
lodging), please feel free to list that information as well.
= = = = =
[1] For people who don’t know, “shoulder dates” are dates surrounding a
booked event, for which the hotel guarantees rooms at the event rate.
Because of the business being brought in by the Summit, the hotel will
offer the much lower Summit rates for up to three nights around the
conference for people who extend their stays.
--
Paul W. Frields http://paul.frields.org/
gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717
http://redhat.com/ - - - - http://pfrields.fedorapeople.org/
irc.freenode.net: stickster @ #fedora-docs, #fedora-devel, #fredlug
16 years, 1 month
F9 Beta release announcement
by Jesse Keating
Ah, spring... when a young penguin's fancy lightly turns to thoughts
of... Beta testing! Yes, spring has sprung, and so has the Beta release
of Fedora 9!
The Beta release is the point at which we really want and need the wider
community's help with testing. Beta is a point of much greater
stability in Fedora's development branch, but some fixes continue to
occur to improve usability, performance, and stability. This release is
great for early adopters and Linux enthusiasts! The Fedora 9 Beta boots
on the majority of systems, and gives you an idea of how the final
Fedora 9 will look and feel. Most importantly, we absolutely need
community assistance to check features and provide feedback and bug
reports, to help ensure that Fedora 9 is our best release ever.
Some highlights of Fedora 9 Beta:
* GNOME 2.22, with new features like a helpful world time clock, better
file system performance, security improvements, power management at the
login screen, the ability to dynamically configure displays, better
Bluetooth integration, improved podcast support, and many other
enhancements
* KDE 4.0.2, which includes a brand new desktop and panel with many new
concepts, integrated desktop search, a brand new visual style called
Oxygen, a new multimedia API called Phonon, and a new hardware
integration framework called Solid -- all integrated by Fedora's KDE SIG
* Firefox 3 Beta 5, featuring a native look and feel, desktop
integration, the new Places that replaces bookmarks, and a reworked
address bar
* Support for resizing ext2, ext3 and NTFS partitions during install
* Support for creating and installing to encrypted filesystems
* PackageKit, a cross-distribution package management solution with a
complete yum backend, designed to unify different distributions'
software management with the latest technologies
* Kernel 2.6.25-rc5
And numerous other improvements and enhancements.
The full release notes are available at:
http://fedoraproject.org/f9-beta-relnotes
Getting it:
===========
The Beta release is available through the following download methods:
* (recommended) BitTorrent, an efficient and easy distributed
file-sharing system
* Jigdo, an alternative system that reduces download size in some
situations, or for people who can't use BitTorrent
* direct download from a mirror location near you
To download, visit:
http://fedoraproject.org/get-prerelease
More Information:
=================
For more information regarding the Beta release, please visit the
release notes page:
http://fedoraproject.org/f9-beta-relnotes
--
Jesse Keating
Fedora -- All my bits are free, are yours?
16 years, 1 month
Fedora Weekly News Issue 125
by Thomas Chung
= Fedora Weekly News Issue 125 =
Welcome to Fedora Weekly News Issue 125 for the week of March 17th, 2008.
http://fedoraproject.org/wiki/FWN/Issue125
In Announcements, we have "Fedora 9 Beta slipped a few days", "Michael
Tiemann's Speech Online"
In Planet Fedora, we have "Fedora University Tour", "FUDCon Boston
2008 at the Red Hat Summit" and "Notacon 5"
We are always looking for more writers to help us deliver timely
information to the Fedora community.
http://fedoraproject.org/wiki/NewsProject/Join.
1. Announcements
1. Fedora 9 Beta slipped a few days
2. Michael Tiemann's Speech Online
2. Planet Fedora
1. Fedora University Tour
2. FUDCon Boston 2008 at the Red Hat Summit
3. Notacon 5
3. Ambassadors
1. Media Distribution and GPL Compliance
2. Fedora 9 Release Day Parties
3. Ambassadors Needed for Several Events
4. Advisory Board
1. Google Summer of Code 2008
5. Infrastructure
1. Asterisk and Town Hall meeting
6. Artwork
1. Art Team Status
7. Security Week
1. Wells Fargo Online Safe-Deposit Box
2. CERT-FI archive file fuzzing
8. Security Advisories
1. Fedora 8 Security Advisories
2. Fedora 7 Security Advisories
9. Events and Meetings
1. Fedora Board Meeting Minutes 2008-03-18
2. Fedora Engineering Steering Committee Meeting 2008-03-20
3. Fedora Infrastructure Meeting (Log) 2008-03-20
4. Fedora Localization/Translation Meeting (Log) 2008-03-18
5. Fedora Release Engineering Meeting 2008-03-17
6. Fedora SIG EPEL Report Week 11/2008
7. Fedora SIG KDE Meeting 2008-03-18
8. Fedora SIG Store Meeting (Update) 2008-03-19
(Section 1)
== Announcements ==
In this section, we cover announcements from Fedora Project.
https://www.redhat.com/mailman/listinfo/fedora-announce-list
Contributing Writer: ThomasChung
=== Fedora 9 Beta slipped a few days ===
JesseKeating announces in fedora-announce-list[1],
"In order to give time for mirrors to sync up the Fedora 9 Beta bits, and
to do some last minute testing, and to avoid releasing beta the day
before a Holiday for a large part of the world, we have decided to delay
the release of Fedora 9 Beta until Tuesday, March 25th."
[1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00008....
=== Michael Tiemann's Speech Online ===
PaulFrields announces in fedora-announce-list[1],
"Part of Michael Tiemann's 'Fedora in the Enterprise' speech from FUDCon
Raleigh 2008 is now available in Ogg Theora format on the Fedora torrent
site."
[1] https://www.redhat.com/archives/fedora-announce-list/2008-March/msg00007....
(Section 2)
== Planet Fedora ==
In this section, we cover a highlight of Planet Fedora - an
aggregation of blogs from world wide Fedora contributors.
http://fedoraproject.org/wiki/Planet
Contributing Writers: ThomasChung
=== Fedora University Tour ===
JackAboutboul blogs[1] on The Red Hat/Fedora 2008 University Tour blog site:
"Just arrived in Pittsburgh after a 5 hour travel ordeal which should
have normally taken no more than 3 hours. Didn't faze me one bit
though, because I'm running on pure adrenaline, PSYCHED for
Carnegie-Mellon in a few hours. CMU faculty, students and staff and
local geeks alike who are interested in being inspired and captivated
please join me as I present "Crash: How a Billion Little Collisions
Define Everything" at 5pm later today in Newell-Simon Hall."
[1] http://fedorauniversity.wordpress.com/2008/03/24/there-he-goes/
=== FUDCon Boston 2008 at the Red Hat Summit ===
PaulFrields points out in his blog[1],
"If you or your employer is springing for attendance at the actual
Summit itself, and you attended a previous Summit, you're eligible for
a special alumni rate. Check your email from the last week and you
should find a note from the Summit organizers with a special
promotional code that will get you a substantial discount. (I just
want to make sure no one misses the chance to save a little cash.) If
you feel you should have received the email and didn't, let me know
and I'll see if I can't get you fixed up."
[1] http://marilyn.frields.org:8080/~paul/wordpress/?p=952
=== Notacon 5 ===
JeffreyTadlock points out in his blog[1],
Fedora has arranged to have a booth at the soon upcoming Notacon 5 in
downtown Cleveland, Ohio. The event is held April 4th through the 6th
and is described as "The Midwest's most unique hacker con and demo
party rolled into one!"
[1] http://jtadlock.wordpress.com/2008/03/21/fedora-at-notacon-5-cleveland-oh/
(Section 3)
== Ambassadors ==
In this section, we cover Fedora Ambassadors Project.
http://fedoraproject.org/wiki/Ambassadors
Contributing Writer: JeffreyTadlock
=== Media Distribution and GPL Compliance ===
Fedora Project leader PaulFrields announced[1] guidelines on the
Ambassadors mailing list for staying GPL compliant when distributing
Fedora media at events. Paul made two main points in the email, the
first being let people know the source code for the binaries on the
CDs/DVDs is readily available at fedoraproject.org. The second was to
be prepared to provide source on CDs/DVDs for people that want it on
that form of media. Ambassadors can either make some source DVDs up
prior to an event or be prepared to burn media at the booth if
necessary.
Fedora Ambassadors should read the announcement in its entirety for
all of the details.
[1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg001...
=== Fedora 9 Release Day Parties ===
FrancescoUgolini invited[1] all Ambassadors to organize a release
party or release event in their area around the time Fedora 9 is
released at the end of April. These can be informal events with
machines showing off the Fedora 9 release and include discussion
between speakers and the public. If you are planning such an event
Ambassador's can add it to the Fedora Events page. If an Ambassador
needs assistance in organizing their release party please contact a
FAmSCo member [3] for guidance.
[1] https://www.redhat.com/archives/fedora-ambassadors-list/2008-March/msg001...
[2] http://fedoraproject.org/wiki/FedoraEvents
[3] http://fedoraproject.org/wiki/Ambassadors/SteeringCommittee/
=== Ambassadors Needed for Several Events ===
There are several EMEA events that need an Ambassador to attend listed
on the Fedora Events page [1]. These events include Augsburger
Linux-Infotag in Augsburg, Germany; Grazer Linuxtage in Graz, Austria;
Linux Days in Geneva, Switzerland and Open Source Expo in Karlsruhe,
Germany. If you can help with any of these events please add your
name to the owner column and contact a FAmSCo member for assistance.
[1] http://fedoraproject.org/wiki/FedoraEvents
[2] http://fedoraproject.org/wiki/Ambassadors/SteeringCommittee/
(Section 4)
== Advisory Board ==
In this section, we cover discussion in Fedora Advisory Board.
https://www.redhat.com/mailman/listinfo/fedora-advisory-board
Contributing Writer: MichaelLarabel
=== Google Summer of Code 2008 ===
PatrickBarnes has announced that Fedora has been accepted as a
mentoring organization in this summer's Google Summer of Code program
for aspiring open-source student developers[1]. Fedora will be working
along side JBoss and the other Red Hat projects. The list of ideas for
this year's GSoC program can be found on the Fedora Wiki[2].
[1] https://www.redhat.com/archives/fedora-advisory-board/2008-March/msg00129...
[2] http://fedoraproject.org/wiki/SummerCoding/2008/Ideas
(Section 5)
== Infrastructure ==
This section contains the discussion happening on the
fedora-infrastructure-list
http://fedoraproject.org/wiki/Infrastructure
Contributing Writer: HuzaifaSidhpurwala
=== Asterisk and Town Hall meeting ===
PaulFrields writes[1] on fedora-infrastructure-list
The Fedora Board should be doing another "town hall" style meeting on
Tuesday April 1. In March we postponed plans until then to use
Asterisk and Gstreamer to provide some sort of listening capability
for community members. In the end there was an agreement on the fact
that there should have been a ticket for things, rather than just
asking for things on the list.
[1] https://www.redhat.com/archives/fedora-infrastructure-list/2008-March/msg...
(Section 6)
== Artwork ==
In this section, we cover Fedora Artwork Project.
http://fedoraproject.org/wiki/Artwork
Contributing Writer: NicuBuculei
=== Art Team Status ===
MairinDuffy send a message to the Fedora Art list[1] with a status
update of the team. She talks about the default theme for Fedora 9,
which was settled for Sulfuric Waves[3], access policy for the Art
group in the Fedora Account System, issues with the release process,
the website banner for the Beta release and a Linux action podcast
interview. NicuBuculei adds[2] to the list two more items: media
(CD/DVD) labels and a release counter for the website.
[1] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00139.html
[2] https://www.redhat.com/archives/fedora-art-list/2008-March/msg00140.html
[3] http://fedoraproject.org/wiki/Artwork/F9Themes/Waves/Round3Final
(Section 7)
== Security Week ==
In this section, we highlight the security stories from the week in Fedora.
Contributing Writer: JoshBressers
=== Wells Fargo Online Safe-Deposit Box ===
http://www.sci-tech-today.com/news/Wells-Offers-Online-Safe-Deposit-Box/s...
It's no secret that even with a brick and mortar bank, you have to
have a certain level of trust with a save-deposit box. But apart from
a dishonest employee, the evildoers will have a rough time getting at
your things. You would expect the bank to have at least, door locks,
security cameras, motion detectors, and a big thick scary vault.
With an online storage system you really don't have all that many
lines of defense. Let's presume the tech guys aren't thieves, and
there are no flaws that could be used to gain access to your account.
That means that the only real way in is to steal your "key". In the
physical world, that might be as difficult as targeting you, knocking
you down in the street, rummaging through your pockets, and finding
the bank key. Then all you have to do is trick the bank into letting
you actually use the stolen key, and taking whatever unusually
important things I have stowed away in my box. In the tech world, I
suspect stealing keys would go something like this:
Send out twelve billion phishing emails. Get some login credentials,
steal their files.
The article mentions RSA tokens, which would help considerably, but
they seem to suggest they are optional. I would be quite hesitant to
put much faith in such a system if it doesn't offer multi factor
authentication. Like most things though, I suspect this is just a case
of making people feel all warm and fuzzy, since they don't really
understand what's going on anyhow.
=== CERT-FI archive file fuzzing ===
CERT-FI published a giant archive of fuzzed files last week.
https://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
There are a couple of things that will need to be fixed in Fedora and
RHEL, they are currently being worked on, but this really brings up a
much bigger question. How is this a security advisory? They gave out
an archive of millions of fuzzed files, the vast majority of which
don't even trigger bugs in the software in question.
I think fuzzing is extremely powerful, and is very useful for finding
bugs and security issues. Until now, fuzzing has really focused on the
tools that mangle the data, to produce data with errors and flaws that
will trigger bugs. These tools are a dime a dozen at this point, so
what CERT-FI did wasn't all that useful. It would have been far more
useful had CERT-FI distributed their suite for generating the fuzzed
files, or released a test runner. Currently, the hard part when
fuzzing is actually running the tests. When something fails, it's
helpful to know where and why it happened, and by the very nature of
fuzzing, there will be many failures caused by the same bug.
This also begs the question, what's coming next? Given what I've seen
of fuzzing, I think it's beginning to reach the end of its extreme
usefulness. Once fuzzing stops returning quick and easy results, I
imagine most researchers will move on to something better for finding
their flaws. It's in the best interest of security researchers to
quickly and easily find security issues.
This reminds me of strcpy usage a few years back. There were an
incredible number of security bugs found back when nobody cared about
how they handled strings. Most developers are now quite aware of this
and the strcpy buffer overflows are rather uncommon. Modern compilers
will now even complain about crummy string use. Fuzzing is really just
finding bugs where developers don't verify user input. This is getting
better, and eventually ensuring that user input is sane will likely
just be common knowledge. It shall be interesting to see what clever
researchers come up with next, but until then, keep up the fuzzing.
(Section 8)
== Security Advisories ==
In this section, we cover Security Advisories from fedora-package-announce.
https://www.redhat.com/mailman/listinfo/fedora-package-announce
Contributing Writer: ThomasChung
=== Fedora 8 Security Advisories ===
* asterisk-1.4.18.1-1.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg004...
* xine-lib-1.1.11-1.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg004...
* libsilc-1.0.2-6.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* krb5-1.6.2-14.fc8 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
=== Fedora 7 Security Advisories ===
* libsilc-1.0.2-6.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* asterisk-1.4.18.1-1.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
* krb5-1.6.1-9.fc7 -
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg005...
(Section 9)
== Events and Meetings ==
In this section, we cover event reports and meeting summaries from
various Projects and SIGs.
Contributing Writer: ThomasChung
=== Fedora Board Meeting Minutes 2008-03-18 ===
* http://fedoraproject.org/wiki/Board/Meetings/2008-03-18
=== Fedora Engineering Steering Committee Meeting 2008-03-20 ===
* http://fedoraproject.org/wiki/Extras/SteeringCommittee/Meeting-20080320
=== Fedora Infrastructure Meeting (Log) 2008-03-20 ===
* https://www.redhat.com/archives/fedora-infrastructure-list/2008-March/msg...
=== Fedora Localization/Translation Meeting (Log) 2008-03-18 ===
* https://www.redhat.com/archives/fedora-trans-list/2008-March/msg00095.html
=== Fedora Release Engineering Meeting 2008-03-17 ===
* http://fedoraproject.org/wiki/ReleaseEngineering/Meetings/2008-mar-17
=== Fedora SIG EPEL Report Week 11/2008 ===
* http://fedoraproject.org/wiki/EPEL/Reports/Week11
=== Fedora SIG KDE Meeting 2008-03-18 ===
* http://fedoraproject.org/wiki/SIGs/KDE/Meetings/2008-03-18
=== Fedora SIG Store Meeting (Update) 2008-03-19 ===
* https://www.redhat.com/archives/fedora-marketing-list/2008-March/msg00108...
--
Thomas Chung
http://fedoraproject.org/wiki/ThomasChung
16 years, 1 month
Fedora Updates System
by Stewart Adam
Did you know you can help packagers test updates, give them feedback and
even prevent a faulty package from being pushed into the repositories?
The new Fedora Updates System[1] (bodhi) integrates with the Fedora
Build System (koji) and lets any user give feedback on a specific
update, be it in updates-testing or in the stable repository.
If you've had good experiences with a testing update, give that it +1
karma by selecting the "Works for me" button and have it released
faster. If a package didn't work on your system, give it -1 karma by
selecting "Does not work". If an update's karma in testing reaches a
certain threshold (currently -3), the package will not be pushed into
the stable repository.
Package maintainers are notified of each comment, so chances are the
problems you mentioned when giving feedback will be fixed sooner. If
you'd like to get started, try it out or just look around, visit the
updates system[1] and select the update category (Pending, Testing,
Stable, Security). Next, choose the update and submit your feedback.
Alternatively, you can use the search bar in the upper right corner of
the page to skip to the exact package you're looking for.
[1]: https://admin.fedoraproject.org/updates
16 years, 1 month
Fedora 9 Beta slipped a few days
by Jesse Keating
In order to give time for mirrors to sync up the Fedora 9 Beta bits, and
to do some last minute testing, and to avoid releasing beta the day
before a Holiday for a large part of the world, we have decided to delay
the release of Fedora 9 Beta until Tuesday, March 25th.
However since we're confident in the Beta content, we will be unfreezing
rawhide today so that development can continue as planned.
--
Jesse Keating
Fedora -- All my bits are free, are yours?
16 years, 1 month
