Linux News for Dec 21, 2001
Red Hat Security Advisory: Updated Mailman packages available (Dec 21, 2001, 22:22)
"Updated Mailman packages are now available for Red Hat
PowerTools 7 and 7.1. These updates fix cross-site scripting bugs
which might allow another server to be used to gain a user's
private information from a server running Mailman."
LinuxPR: Holiday Discounts from theKompany.com
(Dec 21, 2001, 22:14)
"In the spirit of the season, theKompany.com is reducing the
price on all of its software by $10 until the end of the year. If
you've had your eyes on the glass thinking about buying, now's your
opportunity to get a great deal."
LinuxPR: New Xi Graphics Driver Is First To Support Wildcat II On Linux
(Dec 21, 2001, 22:13)
"Xi Graphics Inc. today announced that it has released an OpenGL
Linux graphics driver for 3Dlabs' Wildcat II 5110 workstation
graphics card. The new driver is an addition to Xi Graphics' new
Summit v2.0 product line introduced last month, and is designed to
run on Intel/AMD 32-bit platforms running the Linux 2.4.x
FOSDEM Community Support Operation Launched (Dec 21, 2001, 21:55)
"The FOSDEM is a major European event focusing on Free and Open
Source Software Development. It is organised by people from the
Free and Open Source Software community. It is looking to keep its
independance from commercial interest, and hopes to get support in
this goal from the community."
DukeOfURL Closes Down (Dec 21, 2001, 21:17)
The DukeOfURL web site, frequently linked on Linux Today and
well-liked for in-depth hardware and distribution reviews, is
Mandrake Linux Security Update Advisory: libgtop (Dec 21, 2001, 21:11)
"A remote format string vulnerability was found in the libgtop
daemon by Laboratory intexxia. By sending a specially crafted
format string to the server, a remote attacker could potentially
execute arbitrary code on the remote system with the daemon's
permissions. By default libgtop runs as the user nobody, but the
flaw could be used to compromise local system security by allowing
the attacker to exploit other local vulnerabilities."
Debian Weekly News - December 19th, 2001 (Dec 21, 2001, 21:01)
This week: Debian release archive restored; Hurd CD images;
fixing security critical bugs, "The Good, The Bad And The Ugly"
(the aesthetics of package building); porting Kaffe; more.
Issue #34 of Georg's Brave GNU World Released (Dec 21, 2001, 20:52)
This month: BZFlag (a Free multiplayer 3D tank shoot'em'up
game), Arkanae (a Free Software fantasy game), XShipWars (fly your
space ship through a fascinating multiplayer universe), TRAMP
(transparent file access on remote hosts for Emacs), more.
Linux Kernel 2.4.17 Released (Dec 21, 2001, 19:44)
Changelog, links within.
InstantMessagingPlanet.com: Build Your Own Instant Messaging Solution with Jabber
(Dec 21, 2001, 18:39)
Want the ultimate control over your corporate IM infrastructure?
Then you'll want to consider Jabber, an Instant Messaging
client/server software package built around XML. Michael Hall
reviews: "Our initial reaction to the offering was poor, and it was
with some relief that, just as we prepared to publish this
overview, the company released a second version of the package
addressing a few of the problems we experienced."
NewsForge: The little Linux distribution that could: tomsrtbt (Dec 21, 2001, 16:49)
"Currently using Linux kernel 2.0.36, Tom's manages to cram some
200 modules and utilities onto a single floppy. These range from
the programs needed to mount and format disks, to support for some
PCMCIA devices. There are even pint-sized versions of vi and EMACS,
so that almost no one's editor religion will be offended."
Caldera Open Sources AIM Benchmark Under the GPL (Dec 21, 2001, 16:03)
"The AIM Benchmark technology has proved useful for more than a
decade in measuring performance of hardware and versions of the
UNIX operating system. The benchmarks have been licensed by nearly
all of the vendors of UNIX system hardware. In all, more than 70
companies have used these benchmarks to compare and tune
SourceForge/Linux on Large Systems: Powering the Data Center of Tomorrow
(Dec 21, 2001, 14:58)
"Among the foundry projects are a group of projects motivated by
the impending release of Intel's next Itanium processor (McKinley),
and the associated 82870 chipset from Intel, and similar chipsets
from OEMs. These projects are referred to collectively as the Atlas
UnixReview.com: Tool of the Month: Vipul's Razor (Dec 21, 2001, 14:03)
"Because spam is sent out in massive batches, many people
receive the same spam at about the same time. Wouldn't it be a
great thing if the first person to receive a particular piece of
spam could send out a warning for the rest of us? That's the
concept behind Vipul's Razor, a distributed network for reporting
and filtering spam."
ComputerWorld Antarctica: What do penguins do in the cold? Help model ice shelves (Dec 21, 2001, 13:05)
"As for why Hunter chooses to use Linux for his work, the
reasons are many. 'I can't really imagine how I would do serious
modelling work on anything other than a Unix system of some sort.
Modelling is not generally just a case of running a model - it
involves considerable data manipulation both at the input and
output end,' explained Hunter. 'I know there are several
"MathCad-type" packages around on Windows, but they do tie one into
quite a limited range of manipulation options.' He also cited the
flexibility of a command-line interface as crucial to the type of
work that he does." [Link fixed. -ed.]
Editor's Note: Season's Greetings and a Word on the Linux Today Holiday Schedule (Dec 21, 2001, 12:53)
With the holidays upon us, I'd like to take a few paragraphs to
wish everyone a pleasant season and note that Linux Today will be
going on vacation (for the most part) until January 2.
Mandrake Linux Community Newsletter -- Mandrake Clubhouse Opened (Dec 21, 2001, 11:30)
"MandrakeSoft is proud to announce the grand opening of the
Mandrake Linux Users Club clubhouse -- a custom website where club
members can learn about club-related activities, take part in
discussions, and enjoy special privileges."
GNUStep: An Apology for Announcing Donation of Proprietary Software to the Project (Dec 21, 2001, 07:07)
"The GNUstep project would like to apologize for announcing that
we had been given, as a donation, a license for a proprietary
program. We made a mistake in announcing this, but the first
mistake was in asking for a donation of that kind."
Mandrake Linux Security Update Advisory: glibc update (Dec 21, 2001, 07:02)
"Flavio Veloso found an overflowable buffer problem in earlier
versions of the glibc glob(3) implementation. It may be possible to
exploit some programs that pass input to the glibc glob() function
in a manner that can be modified by the user."
Trustix Secure Linux Advisor: glibc (Dec 21, 2001, 06:58)
"There is a problem in the glob(3) function of the Glibc library
which allows for exploitation of programs that pass user supplied
input directly to it."
IBM developerWorks: Packaging software with RPM, Part 2 (Dec 21, 2001, 02:55)
"RPM is a widely used tool for delivering software for Linux;
users can easily install an RPM-packaged product. In this article,
the second in a series, Dan explains how to package software
without running as root, how to handle software that won't build on
Linux without changes, and how to distribute your work."
LinuxWorld.com: 7 steps to a successful GeForce3 installation (Dec 21, 2001, 01:46)
"I've never had much luck getting the Linux accelerated graphics
drivers for the NVidia GeForce card to work. I could get it working
with XFree86, but it would corrupt the text display when I exited
X11. When I solved that problem, it caused corruption of the
graphics in XFree86. Until recently, I gave up trying to get it to
work. It's working now, and as a result, I'm getting used to
playing games under Linux. Here is the process I went through to
get the card working properly to spare you the pain of figuring it