Fedora Weekly News Issue 248
Welcome to Fedora Weekly News Issue 248 for the week ending October 20, 2010. What follows are some highlights from this issue.
Our issue kicks off with news from the Fedora Planet, including details on upcoming features in Fedora 14, how to convert a virtual machine from VirtualBox to KVM, a new website for virtualization tools, and Atari 8-bit and 16-bit Atari emulators coming to Fedora. We have two articles for Fedora In The News, including a recent discovery of a security vulnerability in the GNU C compiler that affects Fedora and RHEL, and a piece on Fedora's adoption of YubiKey's two-stage authentication for high-security scenarios. In news from the Fedora Ambassadors, new members to the Ambassador team from Brazil and Kosovo, a wonderful summary of discussion on the busy Ambassador list for the past week, and a summary of discussion on the Fedora Ambassador Steering Committee list as well. In Translation team news, development of an alternative process for submitting Fedora 14 release notes, restarting Fedora Localization Project, and a new version of the amateur radio guide that is ready for translation, as well as a new member of the FLP from Italy. In news from the Design team, work on a Fedora 14 poster,more details on the upcoming Fedora Project website redesign and an update on the Fedora Students Contributing t-shirt design contest winner. Our issue reaches completion with updates of security-related packages from the past week. Enjoy!
The audio version of FWN - FAWN - is back! You can listen to existing issues on the Internet Archive. If anyone is interested in helping spread the load of FAWN production, please contact us!
If you are interested in contributing to Fedora Weekly News, please see our 'join' page. We welcome reader feedback: firstname.lastname@example.org
In this section, we cover the highlights of Planet Fedora - an aggregation of blogs from Fedora contributors worldwide.
Contributing Writer: Adam Batkin
The Red Hat Press office highlighted one of the new features in the upcoming Fedora 14: SCAP. "SCAP is a line of standards managed by the National Institute of Standards and Technology (NIST). It provides a standardized approach to maintaining the security of systems, such as automatically verifying the presence of patches, checking system security configuration settings, and examining systems for signs of compromise."
Richard W.M. Jones announced the new http://virt-tools.org/ website. Already, the website is filled with useful documentation and articles. While on the topic of virtualization, Richard described a new on-disk format that is being developed for for VMs, QEMU Enhanced Disk format (QED). And if your VM is taking up too much space, but it is mostly empty, you can make your VM disk sparse.
"Some of you will remember 8-bit and 16/32-bit computers produced in the 80-ties and early 90-ties by a company called Atari. " Dan Horák is packaging some required emulators and supporting software to bring the 80's into the 21st century.
Fedora In the News
In this section, we cover news from the trade press and elsewhere that is re-posted to the Fedora Marketing list
Contributing Writer: Pascal Calarco
Root privileges through vulnerability in GNU C loader - (The H)
Jonathan Nalley forwarded a brief article on security vulnerabilities found recently in the GNU C loader, which affect Fedora and other distributions:
"According to the developer's tests, at least glibc versions 2.12.1 under Fedora 13 and 2.5 under Red Hat Enterprise Linux (RHEL) 5 are vulnerable."
The full article is available
Fedora Uses YubiKey for Strong Two-Factor Authentication - (IT News Online)
Jonathan Nalley forwarded a posting on YubiKey authentication in Fedora:
"The Fedora Project, a Red Hat sponsored and community-supported open source collaboration, has integrated support into its infrastructure services for YubiKey, the open source authentication key by Yubico. The YubiKeys are also used by Fedora’s core team members for securing access to high security hosts....One of the fundamental principles of the Fedora Infrastructure team is their dedication to Fedora's stance on freedom. In short, the team only uses, produces, and deploys 100% free and open source software for these services. Fedora contributors are thus able not only to have immediate access to free software services, but are also able to contribute to their continual improvement.
'The YubiKey is backed by a free software stack and can be used agnostically with other free software, making it well-suited for the rest of the Fedora team's processes,' says Mike McGrath, Red Hat engineer and leader of the Fedora Infrastructure team."
The full article is available
This section covers the news surrounding the Fedora Ambassadors Project.
Contributing Writer: Sankarshan Mukhopadhyay
Welcome New Ambassadors
This week the Fedora Ambassadors Project had a couple of new members joining.
Summary of traffic on Ambassadors mailing list
Neville A Cross posted  about the Fedora 14 Countdown banner for blogs and requested all to spread the word
John Poelstra posted  about upcoming Fedora 14 tasks pertaining to Release Parties and Regional IRC sessions
Sascha Thomas Spreitzer posted  on the outcome of checking the feasibility of putting more than one live-cd on one disc and provided a proof of concept  The resulting thread  has extensive discussions about doing the media production at EMEA
Pascal Calarco put out  a Call for Participation on Fedora Insight by calling upon those who have intermediate to advanced Drupal 6 skills and some time at hand.
David Ramsey posted  meeting notes for APAC meeting on 2010-10-17
Christoph Wickert asked  about legal requirements for the Multi-Desktop Live media which is being proposed to be produced by ambassadors at EMEA. Later, Christoph also followed up  with the Board meeting recap, 2010-10-18 which had the disc-of-spins as an agenda item. Máirín Duffy had a few additional questions and suggestion  on the disc-of-spins item
Carlos Carreno informed  about Fedora Party 2010 at Lima, Peru to be held on 2010-11-06 at Ricardo Palma University
Summary of traffic on FAmSCo mailing list
Christoph Wickert also pointed out  the need to discuss the EMEA media production budget  Sascha Thomas Spreitzer mentioned  that the cost/budget for F14 would remain the same as F13  Max Spevack responded  to Christoph's mail stating that it was "very easily within budget"
This section covers the news surrounding the Fedora Translation (L10n) Project.
Contributing Writer: Runa Bhattacharjee
Fedora 14 Tasks
John Poelstra informed in the list about the upcoming tasks for Fedora 14. As per the schedule, review and correction of the Final Translated Guides (i.e. daily build htmls) and Website content is currently underway.
Alternative Process to Submit Fedora 14 Release Notes
Due to persistant problems in submitting the Fedora 14 Release Notes translation via translate.fedoraproject.org, teams can send in translations via a bug or to other translators who have git-commit access for the document directly to meet the Fedora 14 Release Notes translation deadline. This problem is expected to be resolved when the transifex instance is updated sometime after the release of Fedora 14.
Proposal to Revive the FLP Meetings
Shankar Prasad from the Kannada team proposed to restart the IRC meetings of the FLP. Noriko Mizumoto suggested a few topics for discussion including - upgrading the transifex instance and FLSco elections.
Fedora Website Files Set for an Update
The text in the Fedora Website files have been rewritten in a simpler and shortened format. Paul Frields sought a straw poll from the FLP to update the POT and PO files that would allow the translators to update their translations in accordance with the redesigned website. After a few more additional changes, the files were committed.
New Document for Translation
The Amateur Radio Guide has been added to translate.fedoraproject.org and translations for this guide can now be submitted.
New Members and Sponsors in FLP
Francesco D'Aluisio (Italian)  joined the FLP recently.
In this section, we cover the Fedora Design Team.
Contributing Writer: Nicu Buculei
F14 Release Poster
Emily Dirsh posted a first version of the probably last missing piece before the Fedora 14 release party poster "I made up a (slightly) new poster based on the feedback I got at the meeting today."
One of the goodies brought by the Fedora 14 release is going to be a new and improved version of the Fedora Project website, a joint development of the Websites and Design Teams, so Jef van Schendel posted an update about the current status "Now we want to check everything and make sure it's all in tip top shape and ready to be released."
Máirín Duffy wrote on her blog the third Design Bounty Ninja, Christian Brassat "Christian responded to our third Fedora Design Bi-Weekly Bounty – a t-shirt design for the Fedora Students Contributing program. Christian put together a most excellent T-shirt design for the program, using Inkscape and Nicu’s Open Clip Art T-shirt template, collaborating with the Fedora Design Team throughout the process, then prepping the final design for print using Scribus. He came up with a very nice concept for the T-shirt – it’s summery and fun with its tropical flowers, and relates to free software and mentorship with its sprouting-seed design – and carefully adhered to all of the Fedora branding guidelines. He also provided all of his source work!"
In this section, we cover Security Advisories from fedora-package-announce.
Contributing Writer: Pascal Calarco
Fedora 14 Security Advisories
- glibc-2.12.90-17 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049665.html
- tuxguitar-1.2-3.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049655.html
- postgresql-8.4.5-1.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049496.html
- java-1.6.0-openjdk-188.8.131.52-184.108.40.206.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html
- rekonq-0.6.1-1.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049406.html
- poppler-0.14.4-1.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049392.html
- php-pear-CAS-1.1.3-1.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049360.html
- krb5-1.8.2-6.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049336.html
- ardour-2.8.11-5.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049333.html
Fedora 13 Security Advisories
- freetype-2.3.11-6.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049605.html
- webkitgtk-1.2.5-1.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049604.html
- php-pear-CAS-1.1.3-1.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html
- postgresql-8.4.5-1.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049592.html
- java-1.6.0-openjdk-220.127.116.11-18.104.22.168.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html
- poppler-0.12.4-6.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049523.html
- ardour-2.8.11-5.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049377.html
Fedora 12 Security Advisories
- php-pear-CAS-1.1.3-1.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html
- postgresql-8.4.5-1.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049591.html
- poppler-0.12.4-5.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049545.html
- webkitgtk-1.2.5-1.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049544.html
- ardour-2.8.11-5.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049373.html
- ghostscript-8.71-16.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049367.html