UnrealIRCd: Multiple vulnerabilities
Multiple vulnerabilities in UnrealIRCd might allow remote attackers to compromise the "unrealircd" account, or cause a Denial of Service.
See GLSA 201006-21 for more information.

LinuxTag 2010 runs from June 9th to June 12th in Berlin, Germany. With more than 10,000 visitors last year, it is one of the biggest Linux and open source events in Europe.

You will find the Gentoo booth at Hall 7.2a, Booth 203a. Come and visit us! You will meet many of our developers and users, talk with us, plus get some of the Gentoo merchandise you have always wanted.

Discuss this!

Alex Legler contributed the draft for this announcement.

After the success of the 2009 Screenshot Contest the Contest Team is doing it again!

Gentoo Users, Developers, and Staffers are encouraged to submit their sweetest screenshots. Please head over to the 2010 Contest Page for all of the details.

You can visit this forum post for comments and suggestions. OK enough talk, get started tricking out that desktop.

Asterisk: Multiple vulnerabilities
Multiple vulnerabilities in Asterisk might allow remote attackers to cause a Denial of Service condition, or conduct other attacks.
See GLSA 201006-20 for more information.

Bugzilla: Multiple vulnerabilities
Bugzilla is prone to multiple medium severity vulnerabilities.
See GLSA 201006-19 for more information.

Oracle JRE/JDK: Multiple vulnerabilities
The Oracle JDK and JRE are vulnerable to multiple unspecified vulnerabilities.
See GLSA 201006-18 for more information.

On June 26th we again invite you to take part in this year's bike ride: "Gentoo White Nights in Russia". Gentoo White Nights is a nighttime bike ride along the most beautiful city in the world - St. Petersburg - in the most magical time - the White Nights.

As last year's experience showed, it's possible to ride in the rain, so the event will take place regardless of weather. The event will take place during the night from 26th to 27th June this year. The starting point is the Moskovsky railway station at 10:00 PM. If you'd like to join the Gentoo White Nights, contact Andrey Surganov or Alexey Shetsov.

Andrey Surganov contributed the draft for this announcement.

lighttpd: Denial of Service
A processing error in lighttpd might result in a Denial of Service condition.
See GLSA 201006-17 for more information.

GD: User-assisted execution of arbitrary code
The GD library is prone to a buffer overflow vulnerability.
See GLSA 201006-16 for more information.

XEmacs: User-assisted execution of arbitrary code
Multiple integer overflow errors in XEmacs might allow remote, user-assisted attackers to execute arbitrary code.
See GLSA 201006-15 for more information.

Newt: User-assisted execution of arbitrary code
A heap-based buffer overflow in the Newt library might allow remote, user-assisted attackers to execute arbitrary code.
See GLSA 201006-14 for more information.

Smarty: Multiple vulnerabilities
Multiple vulnerabilities in the Smarty template engine might allow remote attackers to execute arbitrary PHP code.
See GLSA 201006-13 for more information.

Bookkeeper, Accountant, or CPA

And that means? We are looking for help from the Gentoo Community to help us in Accounting/Finance. We are in the process towards the goal of tax-exempt status with the United States Internal Revenue Service as a non-profit corporation. If this is your background, we could really use your help.

Please contact trustees@gentoo.org or visit Gentoo Foundation for details.

Today we have an interview with Andrzej Wasylkowski, and since August 2005 he has been a PhD student at the Software Engineering Chair at Saarland University, Saarbrucken, Germany. His research field is software engineering, with strong focus on program analysis techniques and their application to automatic defect detection.

One of the projects he is involved in is checkmycode, which is a service that allows you to compare your code with the "wisdom of the crowds", over 200 million lines of C code from the Gentoo Linux distribution.

Please continue on and read the complete Andrzej Wasylkowski interview and learn all about the project and its use of Gentoo!

Gentoo has been accepted for its 5th consecutive year in the Google Summer of Code! GSoC pays college students $5000 to work full-time on an open-source project for a summer. Check out our GSoC 2010 homepage if you are interested in this year's GSoC for Gentoo. We particularly encourage applications from students who aren't already involved in Gentoo development—many of our students become Gentoo developers after a successful summer.

Interested students can browse Gentoo's project ideas. Student applications will be accepted starting March 29.

Developers, if you'd like to apply to be a mentor, you can do so on the webapp. Please read the mentoring guide before applying.

What: Gentoo Council Meeting of 8 March 2010.

Voting by email

Ideas seemed to converge on how to vote by email but it was noted that this would constitute a change of GLEP39 which the council can't modify without an all-developers vote. Since there were already other changes planned or suggested to GLEP 39 it was decided that the council would work on a new text and submit it to a vote when ready. Calchan has volunteered to gather all ideas and work on the text.

Do we want a policy for changes in metadata.xml?

Adding such information to metadata.xml was considered a bad idea for two reasons: this information is of no use to the users and would bloat the file for no good reason, and it would be a technical answer to a mostly social problem. It was suggested that reducing territoriality could help. Ideas were proposed like making it official that after sending an email to the maintainers and waiting one week anybody could touch a package.

In the end it wasn't clear what exact problem was to be solved. So scarabeus volunteered to animate the discussions on the mailing list. The goal is to find out what the source of the problem is and what solution(s) we can apply.

For more information, read the summary or the complete IRC log.

Chemnitzer Linux-Tage 2010 is almost here, and Gentoo will be there!

This years Chemnitzer Linux-Tage on March 13th and 14th is another great chance to:

• get in touch with Gentoo developers
• buy Gentoo shirts (be quick, first come first serve)
• chat, discuss, start with ebuilds and overlays, you name it

The "Chemnitz Linux Days" is a conference that deals with Linux and Open Source Software . It is open for everyone, novices and experts alike. This event is organized by IN Chemnitz, CLUG, Computing Center and Faculty of Computer Science of Chemnitz University of Technology, and many volunteers.

See you there!

Sebastian Pipping contributed to the draft for this announcement.

SCALE 8x is almost here, and Gentoo will be there!

Southern California's premier open-source software event is just around the corner, running from Friday, February 19 through Sunday, February 21. Several Gentoo developers will be there; it will be our biggest showing since SCALE 5x.

We'll be showing off some nifty devices running Gentoo, and we'll be giving out installation media. Whether you're a developer, user, or simply curious, be sure and stop by booth #33. See you there!