Linux News for Apr 26, 2001
The Register: Amazon refuses to pull Bill Gates' review of Linux 7.0
(Apr 26, 2001, 23:30)
"Amazon.co.uk has refused to pull reviews of Red Hat Linux 7.0
Deluxe edition by Bill Gates and Linus Torvalds off its site
because they are not offensive." Half a pedant point subtracted for
the headline, one point added for reporting the gag.
LinuxProgramming: python-dev summary 2001-04-12 - 2001-04-26 (Apr 26, 2001, 23:00)
This is a summary of traffic on the python-dev mailing list
between Apr 12 and Apr 25 (inclusive) 2001. It is intended to
inform the wider Python community of ongoing developments.
VA Linux Systems Updates Financial Outlook
(Apr 26, 2001, 22:30)
VA Linux has announced that its expected revenue for its third
fiscal quarter will likely be in the range of $18 to $20 million.
In February, the company announced it expected revenues to be
"below $30 million."
LWN: 'SCEI announced Linux for PlayStation2 !' (Apr 26, 2001, 22:00)
Sony has announced that it will, indeed, ship Linux for the
Playstation 2. The kits will cost 25,000 Yen (~$205 US) and be made
on a limited basis in Japan first.
UserFriendly Available in Polish Edition (Apr 26, 2001, 21:41)
Polish UFies can now get their fix a little more easily. A
reader has written in to let us know about a new Polish edition of
ZDNet: You can't always get what you font (Apr 26, 2001, 21:30)
In his newest column, Evan Leibovitch has taken on font support
in Linux. A lot of people are warming up their bookmarks to link to
the Font DeUglification HOWTO, which is a nice resource and already
linked to in this column. The issue, he says, is that we shouldn't
LinuxProgramming: Eric S. Raymond: CML2 1.2.8 is available (Apr 26, 2001, 20:59)
Eric Raymond has announced the latest version of CML2. This is a
tool designed to ease kernel configuration and compilation for
"non-gurus" slated for introduction into the 2.5.1 or 2.5.2
SecurityPortal: Ask Buffy - After an Attack; Firewalls and Intrusion Detection; SSL; lpd. (Apr 26, 2001, 20:23)
Questions this week cover BIND & DNS; After an Attack;
Firewalls and Intrusion Detection; SSL; lpd.
Opera 5.0 Beta 8 is out. (Apr 26, 2001, 19:59)
Opera 5.0 Beta 8 is out. Excerpt from the new features/changes
list and download link within.
CNET/Yahoo!: Gateway ends "stupid" policies (Apr 26, 2001, 19:05)
File this story under "datapoint mentioned in passing": Gateway
may be one of the kings of the customer loyalty realm, but they've
clung to what their marketing head calls "stupid" policies,
including invalidating warranties if customers install third party
software (which we assume includes whole operating systems).
LinuxProgramming: Snack Sound Toolkit v2.1b1 released (Apr 26, 2001, 18:30)
Kare Sjolander announces a release of the Snack Sound Toolkit
v2.1b1, a Tcl and Python toolkit that adds commands to play,
record, and process sound and supports in-memory sound objects,
file based audio, and streaming audio. Most notable in this new
version: support for Ogg/Vorbis.
EnGarde Secure Linux Security Advisory: xntp i386 packages available (Apr 26, 2001, 18:00)
"There is a very small buffer overflow in NTP daemon which
shipped with EnGarde Secure Linux version 1.0.1."
Linux-Mandrake Security Update Advisory: nedit (Apr 26, 2001, 17:27)
"A temporary file vulnerability exists in NEdit, the Nirvana
Editor. When printing the entire text or selected parts of the text
within the editor, nedit creates a temporary file in an insecure
manner. This could be exploited to gain access to other user
privileges including root."
ZDNet/Yahoo!: Am I a Microsoft lackey or what?
(Apr 26, 2001, 17:08)
Well, here's an interesting question we'd suspect many might
answer very quickly. The issue is, would the thundering
affirmations be correct? When approaching Microsoft, two favorite
labels when addressing its apologists are "FUD" and "astroturf,"
which don't address how to deal with reporters who might honestly
be trying to call it like they see it. A ZDNet columnist responds
to readers "who take the position that anything bad for Microsoft
is good for computing."
WIRED: Watermark Crackers Back Away (Apr 26, 2001, 16:34)
Vowing to fight another day for the right to publish their
findings, the team that successfully cracked SDMI four times has
decided to bow to DMCA-citing threats of litigation from the RIAA
and suspend their plans to present a paper on their work at a
conference this week.
Red Hat Security Advisory: gftp format string vulnerability corrected (Apr 26, 2001, 15:17)
"An updated gftp package is available for Red Hat Linux 6.2 and
7.1. This package contains an upgrade to gftp version 2.0.8, which
improves functionality and fixes a format string
The Register: No Joy from P2P vets for Sun's Jxta
(Apr 26, 2001, 14:36)
From the Sun perspective, JXTA is the greatest thing since
TCP/IP. From the outside perspective, it pushes the P2P buzzword
button nicely. According to this article, from an experienced P2P
developer's perspective it mostly elicits an unhappy "Oh my God."
And the tech press? They've declared P2P DOA anyhow.
InformationWeek: IBM And Sun Duke It Out Over Linux (Apr 26, 2001, 14:00)
Whither Unix? If this article has it right, the inheritors of
the mantle and the two platforms that will keep Unix (in the
generic) viable through this decade are IBM's Linux-friendly AIX 5L
and Sun's Solaris 8. Curiously, Caldera/SCO's OpenUNIX has gone
missing from the list.
LinuxPlanet: New HOWTO: Plug-and-Play-HOWTO (Apr 26, 2001, 13:00)
This updated HOW TO covers the complex Plug-and-Play (PnP)
issue, including how to get PnP to work on your PC (if it doesn't
AllLinuxDevices: David Sugar: Bayonne Project Reaches Milestone 6 (Apr 26, 2001, 12:29)
"This initial release of milestone 6 has the first functional
snapshot of Bayonne XML services. This includes a plugin which
introduces a special XML dialect, BayonneXML. BayonneXML is
intended to become a superset of the existing CallXML dialect and
will provide support for additional features and functionality
specific to Bayonne."
Debian Security Advisory: New versions of Zope fix vulnerabilities (Apr 26, 2001, 11:48)
"This is an addition to DSA 043-1 which fixes several
vulnerabilities in Zope. Something went wrong so it has to be
corrected. The previous security release 2.1.6-7 has two severe
LinuxPlanet: .comment: New Stuff (Apr 26, 2001, 04:48)
This week's .comment involves looks both forward and back.
Dennis Powell takes a look at the newest Opera beta and the
vexations the previously stable browser introduces in its latest
iteration; examines some of the newest features and snags found in
KDE 2.2 alpha 1; and returns to HancomOffice, a Korean office suite
that elicited an unhappy review not too long ago. The trouble with
Hancom, it seems, might not be its developers but rather the lack
of a standard development target.
LinuxProgramming: Linus Torvalds: A Refresher on Submitting Patches (Apr 26, 2001, 04:48)
Ever-interested in slaking our curiosity on how to best go about
submitting a patch for inclusion in Linux, we came across this mail
from Linus, written in response to a curious developer, which
spells it out rather concisely.
CERT defends vulnerability info restrictions (Apr 26, 2001, 03:49)
"Several press reports have suggested that the publicly-funded
CERT/CC will be making its database available to those willing to
pony up anywhere between $2,500 and $50,000 annually for some
manner of subscription service, but this isn't quite right."
Linux 2.4.4-pre7 Released (Apr 26, 2001, 03:30)
As a result of all those tidily submitted patches mentioned
earlier this evening, here's Linux 2.4.4-pre7, featuring updates to
USB, Coda cleanups, and more.