= Fedora Weekly News Issue 92 =
Welcome to Fedora Weekly News Issue 92 for the week of June 10th
through June 16th, 2007. The latest issue can always be found here
and RSS Feed can be found here.
1. Reminder - Fedora Core 5 EOL on 2007-06-29
2. Fedora-Devel-Announce is Now Open
3. Fedora Board Elections
2. Planet Fedora
1. Working on Fedora L10n
2. End of "I didn't know about that change!?!" for Fedora devel
3. Workaround for kernel panic on suspend/resume
1. Magazine Fedora 7 (France)
2. Fedora 7 Xen First Look
3. Maximum PC reviews Fedora 7
1. Guidelineism Defeated By Glorious Benefit Of Action
2. Cross-building Bliss
3. Yelping Over Bloated Firefox And Flash
4. The Updates Firehose
5. Pay Per Spin Web Interface?
6. Secondary Arch Proposal Cont.
7. F8 Devel - User Storage Configurations
8. R500 Initial Driver Release
3. Documentation Project Steering Committee Meeting
4. Summer Of Code
1. Meeting Times
2. Monitoring Commits
1. Security Updates
2. Escalation Paths/Methods
1. Fedora 8 Theme
9. Security Week
1. Fedora Security Response Team
10. Advisories and Updates
1. Fedora 7 Security Advisories
2. Fedora Core 6 Security Advisories
11. Events and Meetings
1. Fedora Board Meeting Minutes 2007-06-12
2. Fedora Documentation Steering Committee 2007-06-12
3. Fedora Engineering Steering Committee Meeting 2007-06-14
4. Fedora Infrastructure Meeting 2007-06-14
5. Fedora Indian Ambassadors Meeting Minutes 2007-06-13
6. Fedora Packaging Committee Meeting 2007-06-12
7. Fedora Release Engineering Meeting 2007-06-11
12. Extras Extras
1. An interview with Fedora leader Max Spevack
2. Thomas Chung gives Fedora Talk at Caltech
== Announcements ==
In this section, we cover announcements from various projects.
Contributing Writer: ThomasChung
=== Reminder - Fedora Core 5 EOL on 2007-06-29 ===
MaxSpevack announces in fedora-announce-list,
"As many of you are aware, our policy on the lifecycles of Fedora
releases is: Fedora X will be maintained until about one month after
Fedora X+2. Fedora 7 was released on May 31st. Fedora Core 5 will
reach its End of Life on Friday June 29th. This was previously
mentioned on fedora-announce-list on May 3rd, but is worth
=== Fedora-Devel-Announce is Now Open ===
WarrenTogami announces in fedora-announce-list,
"fedora-devel-announce list is now open. The goal of this list is to
make it easy for Fedora contributors to follow changes in that may be
pertinent to developers within the Fedora Project. This is intended to
be a LOW TRAFFIC announce-only list of development topics, so we hope
subscribers wont feel the need to filter it away from their Inbox."
=== Fedora Board Elections ===
MaxSpevack announces in fedora-announce-list,
"We are due for our first round of Fedora Board elections. There have
been some threads recently on fedora-advisory-board that have been
working to clarify what the Board's role should be as it goes into its
next term. Those who have not seen that thread may want to look
"The Fedora Board continues to serve as the top-level decision making
body within Fedora. One of the challenges that the "new" Fedora Board
will face is doing a better job of making sure that the Fedora Board
appropriately manages the rest of the Fedora community, and also
Fedora's interaction with the larger Red Hat engineering, legal, etc.
== Planet Fedora ==
In this section, we cover a highlight of Planet Fedora - an
aggregation of blogs from world wide Fedora contributors.
Contributing Writers: ThomasChung
=== Working on Fedora L10n ===
DimitrisGlezos points out in his blog,
"In the last few days I've been working on Fedora's L10n
infrastructure. Not all of it was exciting, but we really need to
increase the quality of our international desktops. Why? Well, for
start, Lord Smolt informs that 3 out of 10 registered systems are
non-English, and I estimate another 2/10 of the en_US have localized
desktop sessions (so that users won't be facing encoding problems on
"...And finally, we are building an exciting new front-end to L10n, to
replace the rusty i18n.redhat one. Besides translation statistics, it
presents i18n errors of the module and urges people to code using the
standard libraries, which increase interoperability. It also supports
Subversion, Mercurial, and GIT repos. You can give it a spin at the
testing system we've put up."
=== End of "I didn't know about that change!?!" for Fedora development (?)
KarstenWade points out in his blog,
"Yes, my subject is quite certain that maybe possibly it could be the
end of some of the squabbling and misunderstandings amongst Fedora's
developers and packagers. Because I have so much trust in my fellow
humans, I can say with something almost like sureness that we'll see
this problem addressed ... in our lifetime ..."
"But anyway, Warren Togami announced a good step in the right
direction: Fedora-Devel-Announce is Now Open. Go subscribe. Especially
if you have ever missed a small or large change in Fedora development
that mattered to you. If this list fails to announce something in
the future, just think of all the ground for grievance you'll have!"
=== Workaround for kernel panic on suspend/resume ===
RolandWolters points out in his blog,
"One of the biggest disadvantages of Fedora 7 for me was that my
Suspend to RAM suddenly stoppped working: the kernel crashed on
resume and left me with a kernel panic. I filled bug 241700 but was
only forwarded to the HAL Quirk Site which does feature suspend
problems in a very user friendly way. But although that page has a lot
of helpful tips it does not cover kernel crashes."
After that I re-added the removed kernel modules bit by bit and
checked resume each time. It turned out the broken module is fw_ohci,
the Firewire Open Host Controller Interface. If you also have a kernel
panic on resume you can check for yourself if this module is the
reason: remove it by modprobe -r -v --first-time fw_ohci ("r" is for
remove, "v" is for verbose and "first-time" make the process exit by
error if the module was not loaded in the first place). After that,
suspend the machine and try to resume."
== Marketing ==
In this section, we cover Fedora Marketing Project.
Contributing Writer: ThomasChung
=== Magazine Fedora 7 (France) ===
PierreYvesChibon reports in fedora-marketing-list,
"As a member of the French Fedora ambassador team, I am proud to
announce you the future release of an entirely magazine dedicated
Fedora 7. The announce of the release of the magazine is available
here. The magazine will be published in France for 9,95€, it
contains 2 DVDs
(i386 & x86_64)."
=== Fedora 7 Xen First Look ===
RahulSundaram reports in fedora-marketing-list,
"Overall, the tools for Xen management are coming along quite nicely,
actually developing a bit faster than I expected, and Fedora 7 is a
great place to try them out. They will certainly ease Xen management
(and other virtualization technologies on Linux, for that matter) in
the future and I look forward to taking advantage of them when they
make their way into RHEL 5.1."
=== Maximum PC reviews Fedora 7 ===
RahulSundaram reports in fedora-marketing-list,
"If you love Red Hat, it goes without saying that you're bound to go
nuts over Fedora 7. But this distro is also worth a look for just
about anyone who wants to try Linux for the first time. With a
noob-friendly installation routine and simple customization menus that
make daily use a breeze, we're glad Fedora 7 has thrown its hat into
== Developments ==
In this section, we cover the problems/solutions,
people/personalities, and ups/downs of the endless discussions on
Contributing Writer: OisinFeeley
=== Guidelineism Defeated By Glorious Benefit Of Action ===
HansRosbach noticed something that had been commented on before:
the dependence of GRUB on fedora-logos, which in turn depends on gtk2,
which in turn depends on a whole pile of Xlib stuff. Hans wanted to
know why all this was required for a boot menu, when it wasn't
required in FC4 to FC6, and also thought that the dependencies were in
the wrong order anyway. RahulSundaram answered that this had been
discussed before and explained that fedora-logos was a single package
of trademarked images and logos for legal reasons. This makes it
simpler for derivative distributions to remove all Fedora trademarked
After examining the link supplied by Rahul, AxelThimm suggested
that one of two things should happen: 1. the guideline that a package
must require application directories into which it may drop files
should be relaxed for fedora-logos or it should be made a co-owner of
those application directories; 2. a sub-package containing a
minimalist set of files for GRUB's splash screen should be created.
Axel proposed that he could ask the Packaging Committee to relax the
guideline and asked which of the options was best. He also thought
that "We can't allow blind guideline-ism to create such awkward
where simply booting the system requires gtk!"
The second option was impractical according to MatthiasClasen
because "legal" specifically wanted a single-package of trademarked
images, BillNottingham later clarified that this specifically meant
logos and logotype, but not themes and icons. This was news to
KevinKofler who was able to show that the Fedora logo was in
redhat-artwork and redhat-artwork-kde. Bill requested Kevin to file a
bug asking for logo.png to be moved into fedora-logos.
Hot on the heels of this discussion thhe maintainer AdamJackson (ajax)
posted promptly to say that he had implemented option 1 in rawhide
with fedora-logos no longer requiring anything and co-owning the
directories into which it drops files. He cautioned that this was
likely to break respins.
=== Cross-building Bliss ===
Continuing the discussion of cross-compilation started last week,
BrendanConoboy expanded upon what he saw as the main technical and
social issues which needed to be resolved. Brendan noted the ability
of gcc and binutils to use sys-roots and necessity to extend the build
system (e.g. Koji), and the need to modify individual packages to
Picking up on the central chicken-and-egg problem of how to get a
glibc for a new architecture, DavidWoodhouse argued that the
current "solution" was a problem because it didn't separate gcc and
glibc. Brendan suggested limiting the discussion to the current
architectures which led to David identifying that one
classification of the problem saw it break down into the distinct
subproblems of building (which was relatively soluble), and packaging
(which was more restricted and inflexible and needed multiple
rpmbuilds currently). Brendan outlined three possible SRPMS: 1) a
single bloated master package for all possible targets; 2) a smaller
number of single SRPMS for multiple targets grouped for technical
reasons; and 3)HansdeGoede's solution of a single SRPM for a specific
RalfCorsepius definitely favored avoiding option #1 and pointed out
that while #3 had a downside in that it bloated repositories it was
what he was currently doing succesfully. AndyGreen thought that #1
was the Holy Grail as it led to a single point of control, reducing
the loss of information which would occur in multiple specfiles. An
exchange between Andy and HansdeGoede brought out an important
distinction between Fedora-to-Fedora crosses versus
Fedora-to-CompletelyOtherOS crosses (Hans was dealing with 256B RAM
This distinction was also made by Hans after Ralf and David seemed
to be talking at cross-purposes, with David wanting to avoid pandering
to architectures which didn't work with the current toolchain and yet
hadn't worked to get the toolchain fixed upstream. David had earlier
referenced JakubJelinek's succesful approach to the kernel as a model
for how to deal with this human aspect of the problem. Hans pointed
out that what he and Ralf were doing was to produce specific
executables stored on removable media and targetted at an onboard OS.
Hans particular expertise is with the gp2x[11a]. David accepted the
distinction and Ralf explained that he was interested in a
slightly broader problem which involved the RTEMS embedded OS both
as a target in its own right and also in the problem of making a
Canadian-cross of RTEMs on Fedora targetted to other important OSes.
As the spotlight was focused on him Hans naturally took the
opportunity to ask why there hadn't been more feedback on his
arm-gp2x review tickets. Ralf responded that glibc was not familiar
to him, but that he was concerned with the use of a bootstrap in the
specfile. This prompted Brendan to admit that this was one of
DavidWoodhouse's central points and that it was indeed the only
current way. A detailed discussion between Ralf and Brendan seemed to
result in consensus that some means of extending rpm to separate
out target/foreign-arch packages from the host/native rpmdb was
needed. Ralf proposed a second, completely isolated rpmdb for the
target arch, which he surmised would be like the way mock and mach
used chroots. Brendan concurred that "leveraging mock is going to
a key to cross building bliss."
AndyGreen exposed the problem that BuildRequires: in a specfile
being used for cross-compilation will conflate requirements for both
the host and the target and proposed that rpmbuild be enhanced to deal
with this case. DavidSmith's experience was that the problem was
actually worse and had needed some conditional architecture testing in
BuildPrerequires. Ralf drew further details of this solution from
David and ClarkWilliams with regard to the ability of rpm to
install rpms with foreign/non-host architecture to a specific rpmroot.
In a later branch of the discussion AndyGreen raised the forking
of RPM which has taken place as an opportunity to implement these
changes to how BuildRequires should be handled for cross-compilation.
AndyGreen clarified to OliverFalk that while cross-compiled
packages might need to be tested on native hardware, the actual
compilation should work. LennertBuytenhek wasn't so sure, citing
the possibility that the binaries, although functionally equivalent,
might not be identical.
=== Yelping Over Bloated Firefox And Flash ===
A confused HansdeGoede wondered why he had received conflicting
comments on packages he maintains about whether the help-viewer "Yelp"
should be made a Requires: or not. Hans' personal opinion was that it
should be as otherwise the packages lacked basic functionality without
even throwing an error. ChristopherAillon thought that Yelp should
be required once by base gnome and not in each of the hundreds of
individual gnome packages. VilleSkyttä pointed to the bloated
chain of dependencies (including Firefox) that requiring yelp entailed
and said this was a general trend of GNOME. Christopher agreed and
pointed to possible future dependencies on nspluginwrapper and
BillNottingham suggested that surely this was a function call in a
common gnome library, leading ToshioKuratomi (who also had an affected
package) to spend some time tracing the chain of calls and suggest
that libgnomeui should require HelpBrowser or DocbookXMLViewer which
would be virtual provides in yelp. RayStrode discovered that there
was a gnome_help mechanism to put up a dialog warning that help was
missing and wondered if help could be thought of as an optional
feature. This was attractive to BernardoInnocenti (who thought the
removal of help would benefit OLPC in size reduction), but not favored
by Bill (who thought that the solution was to make the viewer less
bloated), or Toshio (who thought that program help was a different
category than man pages or README files).
Ray's news about gnome-help was welcomed by Toshio, who also noted
that yelp was selected as the help view by means of Gconf key, which
seemed to bear out a horrified BillNottingham's joke that rpm would
need to dynamically compose requires from the union of all users'
A brief digression into the bizarre American penchant for mixing up
the natural date order landed explanations from AlanCox on the
rationale behind this and from CaolanMcNamara on how to change the
order in OOimpress.
ColinWalters thought the GConf key could just be ignored and
unwittingly touched-off a flamewar when he wondered whether anyone
would really miss help. ChristopherAillon advanced the argument
that the real problem was not to do with yelp, but with the provision
of a firefox-32 package against his wishes. This apparently
provides an icon which runs a 32-bit Firefox installed on a x86_64
system to view Flash plugin content. Christopher was annoyed that his
recommendations had been over ridden.
An attempt by MattMiller to draw a distinction between an opinion
mattering versus being completely authoritative revealed the depth
of Christopher's frustration. He pointed to the difficult legal
requirements that made his life hell and threatened to leave the
project leaving Fedora with Iceweasel and no maintainer.
WarrenTogami responded with the argument that the problem was
nothing to do with firefox-32, and that an earlier conflict had been
arbitrated through engineering management in Warren's favor and that
Christopher's characterization was "FUD with a few outright lies
sprinkled within." Warren argued that the script was necessary until
nspluginwrapper was supported. BillNottingham thought that Warren was
actually making Christopher's life harder as asserted, leading
MattMiller to try to present a balanced recognition that both
Warren and Christopher were highly respected and experienced.
At this point MatejCepl returned to Hans' original query. Matej's
post took responsibility for not communicating some discussion on
#fedora-devel instead of RH-interal IRC, but more interestingly
suggested that what was needed was the addition of soft-dependencies
in packages, akin to Debians Suggests: and Recommends:. Following
enquiry from JesseKeating, Matej explained that a Recommends flag
would indicate to yum that if a recommended package were removed then
an unspecified but useful functionality would be lost. AxelThimm
thought this was horribly reminiscent of some older Windows packaging
"quirks" and while DominikMierzejewski (rathann) agreed he also
pointed out that the soon-to-arrive standalone Gecko would simplify
=== The Updates Firehose ===
Noting the large number of updates JesseKeating asked were they all
necessary. This led to a discussion of one differentiator of Fedora
from other distributions, and also to several rumblings of discontent
from packagers about the imposition of more interference.
BrunoWolff liked having them available but asked if it was possible
to have an extra categorization available so that yum could e.g. be
told only to select security updates and bug-fixes but not new
packages. Jesse responded that LukeMacken would be implementing
that and in future Pup would show a list of the notes which
maintainers had inserted into bodhi. TillMaas and Luke later
discussed this, with Luke noting that although the yum-security
plugin is present, bodhi still needs to be altered. Separately
JasonTibbits and KevinKofler also discussed[4a] such functionality.
ChristopherBlizzard asked if any users were actually complaining,
and pointed out that Fedora wasn't RHEL. BernardoInnocenti advanced
the case of multiple machines needing updates, which sparked a good
subthread around MattDomsch's suggestions about how to add a local
private mirror to mirromanager. GianlucaSforna posted a link to the
GuruLabs automatic-local-mirror HOWTO, while BillNottingham preferred
a yum-plugin written by RobertSpanton to allow local repository
mirrors to be discovered by yum. DaxKelson pointed out that his
method had the advantage of needing no modifications to the client.
The definition of "local mirror" was raised by PekkaSavola and
following JakubJelinek's enquiries about the "3 mirrors per country"
rule, Matt laid out the changes that need to be made to improve
Several maintainers, including JefSpaleta, voiced a desire for
best-practices guidelines to help in determining when to push an
update. Jef also wondered how many of the updates were due to new
packages entering the tree versus bug-fixes to existing packages.
Stimulated by this JesseKeating, BillNottingham and WillWoods tossed
around ways of gathering statistics on which installed packages
were actually used, including porting Debian's popcon or modifying
Mugshot. While ColinWalters and RahulSundaram considered adapting
AxelThimm was generally happy with the updates and disagreed with
ChristopherAillon that too many changes were being backported from
rawhide to F7, resulting in a lack of incentive to upgrade to F8.
TillMaas and RudolfKastl also disagreed with Christopher on where
the line should be drawn on bugs that should be fixed with updates.
Rudolf pointed out that presto would probably make the updates
palatable for users and that Fedora's rapid progress was one of the
reasons he used it instead of other distros.
Echoing the general happiness with the updates strategy,
KevinKofler thought that the updates were Fedora's strength and
differentiated it from other distros. MichaelSchwendt was
skeptical because of the unhappiness of users with broken apps.
Rahul proposed that a policy on updates be written, prompting a
negative reaction from HansdeGoede who requested that objective
measurements be used to determine if a problem existed before any
policies were written. NeilThompson was much more blunt, and worried
 that his bowel movements would soon be regulated and that the
community was being destroyed by heavy-handed bureaucracy. Responding
to this MatthiasClasen deprecated the language and suggested that
the granularity of updates mentioned previously would allow filtering
on the client side.
=== Pay Per Spin Web Interface? ===
A new forum to provide respins of Fedora called respins.org
mentioned by RahulSundaram. Rahul wondered if there was a
web-interface layered over pungi and livecd-tools to allow package
selection and ISO generation.
NicolasMailhot wasn't too keen about the bandwidth implications.
Rahul argued that infrastructure had not objected, but MikeMcGrath
responded that Rahul hadn't given them enough information to
determine how much bandwidth would be used. It seemed there was a
mis-communication over which emails should have been ignored.
SethVidal responded to Nicolas that the costs of such a service
would be huge and a fee-based site had been discussed to allow
individuals to produce a customised spin. Seth donned asbestos
underpants and pointed out that the tool would be fully open source.
JonathanSteffan offered up some of the Red Hat interns working on
the project to take some of the flames, but for some reason they
remained quiet! Jonathan also posted details of the current and
future state of the Revisor tool. It wasn't clear from reading this
whether this is what the interns are working on. Revisor currently has
a Gtk front-end, but the development work could see that replaced with
anything including a web front-end.
JeroenVanMeeuwen, also of the Revisor project, posted more details
including the massive number of enhancement requests they're
=== Secondary Arch Proposal Cont. ===
Last weeks proposal on 2ary architectures by TomCallaway continued
to draw comment. ChristopherBlizzard had several points to make,
and ThorstenLeemhuis objected to the first, which was that a
maintainer would be responsible for making sure his/her package built
on all the primary architectures. Thorsten thought this would
dissuade people from being Fedora maintainers and preferred the model
pioneered by DavidWoodhouse for PPC in which there would be a team/SIG
which could be appealed to for help.
David thought that Chris actually had the right idea and that
ideally maintainers should be competent enough to fix bugs and
thoroughly understand the code and preferred to sacrifice quantity to
quality. David also thought that the maintainer's sponsor should have
primary responsibility to help the maintainer, but also saw the value
of a team which could help out. In his experience most bugs were not
actually arch-specific, but were generic and just exposed on
particular architectures. KevinKofler and David swapped examples
of such bugs.
The question arose as to whether PPC was a secondary architecture
now, and David answered negatively, pointing to a decision to wait
until another architecure has proved the system will work. MattDomsch
backed this up with a link to the Jun 12 FAB minutes, while
AxelThimm disputed Matt's interpretation.
=== F8 Devel - User Storage Configurations ===
A proposal to create a single directory to hold all the dot-files
created by applications to hold user settings was mooted by
DavidTimms. It received mainly negative responses from KDE users.
MatejCepl also pointed David to the work done already by the
freedesktop project on basedir.
=== R500 Initial Driver Release ===
FlorianLaRoche and MikeChambers both wanted to know if the R500
drivers (for very recent ATI video cards) would be packaged for F7 or
F8. AdamJackson (ajax) responded that he needed to test them on
their intended hardware first. Mike and AdamTkac were eager to put
their X1300s to the test.
Very quickly ajax posted a notification of a testbuild, noting its
failure on his own T60p, requirement of libpciaccess and inclusion in
the next rawhide push. DavidZeuthen gave quick, detailed feedback
about partial success on a MacBookPro with an X1600/M56P.
NathanielNoblet with an X1650, and MikeChambers with an X1300 had a
disappointing experience and ajax emphasized that he was making
sure that bugs reported to him would pass upstream.
== Documentation ==
In this section, we cover the Fedora Documentation Project.
Contributing Writer: JonathanRoberts
MikeMcGrath posted a link to the fedora-docs-list, pointing to the
statistics for the docs.fedoraproject.org
site. The statistics show
that, so far this month, there have been 149,219 unique visitors to
the site! It was noted, however, that the number one search term was
"disable selinux", leading to a discussion about the current state of
the SELinux FAQ.
=== SELinux ===
After reviewing the statistics for docs.fedoraproject.org
pointed out that there was no maintained canonical FAQ, with the top
two results on Google for "disable selinux" pointing to the FC3
SELinux FAQ and the RHEL 4 SELinux FAQ. As a possible solution to
this it was proposed that a permanent URL on the wiki, or on the
future Plone implementation, would help encourage regular updates. It
was decided, however, that the FAQ should point upstream to
for overall information, with Fedora specific
information maintained by the Documentation Project. PauloSantos
stepped forward and offered to maintain this FAQ.
=== Documentation Project Steering Committee Meeting ===
The log for the 12th June meeting of the FDSCo was posted to the
fedora-docs-list. A HTML version is also available.
=== Summer Of Code ===
VillePekkaVainio posted a question to the fedora-docs-list regarding
his Summer Of Code project, creating a system for publishing and
editing man/info pages with MoinMoin. The question revolves around
the best format to store the information in, trying to strike a
balance between making editing available to new users and making the
edits accessible to upstream as easily integrated patches.
Amit Uttam wrote to the fedora-docs-list about his Summer Of Code
project, to create an elegant DocBook to PDF solution. Despite this
project not being selected as an official Summer Of Code project, he
still plans to develop the project, and as such, posted the
original project proposal.
== Translation ==
This section, we cover the news surrounding the Fedora Translation
Contributing Writer: JasonMatthewTaylor
=== Meeting Times ===
The Translation team is looking at different meeting times to
ideally get more attendance, which, in turn will help better organize
and direct the project.
=== Monitoring Commits ===
For those that are so inclined, it is now possible to monitor
Translation team commits.
== Infrastructure ==
In this section, we cover the Fedora Infrastructure Project.
Contributing Writer: JasonMatthewTaylor
=== Security Updates ===
DamianMyerscough noted some security concerns to be addressed in
the near future.
=== Escalation Paths/Methods ===
Discussion has been had about how and who to notify in the event of
== Artwork ==
In this section, we cover Fedora Artwork Project.
Contributing Writer: JonathanRoberts
=== Fedora 8 Theme ===
Following last weeks discussion about artwork for Fedora 8, this week
has seen a lot of activity over the creation of a new theme for Fedora
8, with several mock-ups being created. Focus has been spread across a
number of mock-ups, including MartinSourada's work,
MairinDuffy's and Mark's. A lot of the information discussed in
the threads has been collated into a wiki page, making it easily
The discussion about artwork for Fedora 8 also branched out to the
Fedora Forums, with a summary of the thread posted to the list.
== Security Week ==
In this section, we highlight the security stories from the week in Fedora.
Contributing Writer: JoshBressers
=== Fedora Security Response Team ===
Last week was a rather slow news week as far as security news goes.
The biggest news that should affect Fedora would be the fact that the
Fedora Security Response Team has finally gotten off the ground. The
group is currently pouring over the current list of known CVE ids to
determine if we've missed any old flaws in Fedora 7. Once that's done
the team will take over the constant task of parsing all the new
vulnerabilities that affect Fedora 7.
Anyone is welcome to help in this effort. One of the team goals is to
keep things open and transparent. Anytime security work is being
done, it is hard to keep the process open for a number of reasons.
One of the bigger reasons is that if all the information isn't public,
it can be easy to sweep certain flaws under the rug and forget about
them. This is bad for any project, especially something like Fedora.
If you have any interest in this group, feel free to join the mailing
list, or stop by #fedora-security on Freenode. All are welcome,
there's plenty of work to do. It's still a small team, but the
current group seems to be doing a fine job. More informatoin on the
team can be found on the wiki.
== Advisories and Updates ==
In this section, we cover Secuirity Advisories and Package Updates
Contributing Writer: ThomasChung
=== Fedora 7 Security Advisories ===
* 2007-06-16 [SECURITY] evolution-data-server-1.10.2-3.fc7 -
* 2007-06-16 [SECURITY] phpPgAdmin-4.1.2-1.fc7 -
* 2007-06-13 [SECURITY] kernel-2.6.21-1.3228.fc7 -
* 2007-06-13 [SECURITY] libexif-0.6.15-2.fc7 -
* 2007-06-13 [SECURITY] openoffice.org-2.2.0-14.11 -
* 2007-06-12 [SECURITY] spamassassin-3.2.1-1.fc7 -
* 2007-06-11 [SECURITY] mecab-0.96-1.fc7 -
* 2007-06-11 [SECURITY] perl-mecab-0.96-1.fc7 -
* 2007-06-11 [SECURITY] python-mecab-0.96-1.fc7 -
* 2007-06-11 [SECURITY] ruby-mecab-0.96-1.fc7 -
=== Fedora Core 6 Security Advisories ===
* 2007-06-13 [SECURITY] iscsi-initiator-utils-22.214.171.1245-0.0.fc6 -
* 2007-06-12 [SECURITY] openoffice.org-2.0.4-5.5.23 -
* 2007-06-12 [SECURITY] spamassassin-3.1.9-1.fc6 -
* 2007-06-11 [SECURITY] file-4.21-1.fc6 -
* 2007-06-11 [SECURITY] libexif-0.6.15-1.fc6 -
* 2007-06-11 [SECURITY] mod_perl-2.0.2-6.2.fc6 -
* 2007-06-11 [SECURITY] pam-0.99.6.2-3.22.fc6 -
== Events and Meetings ==
In this section, we cover event reports and meeting summaries from
Contributing Writer: ThomasChung
=== Fedora Board Meeting Minutes 2007-06-12 ===
=== Fedora Documentation Steering Committee 2007-06-12 ===
=== Fedora Engineering Steering Committee Meeting 2007-06-14 ===
=== Fedora Infrastructure Meeting 2007-06-14 ===
=== Fedora Indian Ambassadors Meeting Minutes 2007-06-13 ===
=== Fedora Packaging Committee Meeting 2007-06-12 ===
=== Fedora Release Engineering Meeting 2007-06-11 ===
== Extras Extras ==
Contributing Writer: ThomasChung
=== An interview with Fedora leader Max Spevack ===
MaxSpevack was interivewed by LWN:
"Now that Fedora 7 has been released, Fedora project leader Max
Spevack has a little bit of breathing room. Like nature, LWN abhors a
vacuum, so we sent Max a list of questions and a request for answers.
We are now happy to present the answers. Without further ado..."
=== Thomas Chung gives Fedora Talk at Caltech ===
ThomasChung gave a Fedora Presentation for San Gabriel Valley Linux
Users Group at Caltech on his birthday. The topic was "Fedora 7 -
What's New" and Live Demo on virt-manager with KVM and Revisor. Some
Fedora 7 DVDs and Fedora Stickers were also given to the group at the
end of the presentation.
== Feedback ==
This document is maintained by the Fedora News Team. Please feel
free to contact us to give your feedback. If you'd like to contribute
to a future issue of the Fedora Weekly News, please see the Join
page to find out how to help.