Gentoo Logo
Gentoo Spaceship

Get Started
Gentoo Handbook
Downloads

News
Security Announcements
Calendar
Infrastructure Status

Documentation
Gentoo Handbook
Featured Documentation
IBM dW/Intel article archive

Get Gentoo
Downloads
Mirrors

Community
Discussion Forums
IRC Channels
Mailing Lists
Report Issues
Planet (Blogs)
Online Package Database
Wiki
Contact Us
Sponsors

Get Involved
Report Issues
Help Wanted
Help maintaining packages
Discussion Forums
IRC Channels
Mailing Lists
Become a Developer
Offer Resources
Enhancement Proposals (GLEPs)
Source Repositories
Developer's Manual

Other
Developer List
Developer Map
Gentoo Stores
Projects

About
About Gentoo
Philosophy
Social Contract
Name and Logo Guidelines
Logos and themes
Screenshots



Gentoo logoWe produce Gentoo Linux, a special flavor of Linux that can be automatically optimized and customized for just about any application or need. Extreme performance, configurability and a top-notch user and developer community are all hallmarks of the Gentoo experience. To learn more, read our about page.

GLSA 201408-18: net-analyzer/nrpe
Posted on August 30, 2014 by Gentoo Security Team

Clock

NRPE: Multiple Vulnerabilities
Multiple vulnerabilities have been found in NRPE, the worst of which can allow execution of arbitrary code.
See GLSA 201408-18 for more information.

GLSA 201408-17: app-emulation/qemu
Posted on August 30, 2014 by Gentoo Security Team

Clock

QEMU: Multiple vulnerabilities
Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code.
See GLSA 201408-17 for more information.

GLSA 201408-16: www-client/chromium
Posted on August 30, 2014 by Gentoo Security Team

Clock

Chromium: Multiple vulnerabilities
Multiple vulnerabilities have been found in Chromium, the worst of which can allow remote attackers to execute arbitrary code.
See GLSA 201408-16 for more information.

GLSA 201408-15: dev-db/postgresql-server
Posted on August 29, 2014 by Gentoo Security Team

Clock

PostgreSQL: Multiple vulnerabilities
Multiple vulnerabilities have been found in PostgreSQL, the worst of which may allow remote Denial of Service.
See GLSA 201408-15 for more information.

GLSA 201408-14: net-misc/stunnel
Posted on August 29, 2014 by Gentoo Security Team

Clock

stunnel: Information disclosure
A vulnerability in stunnel might allow remote attackers to gain access to private key information.
See GLSA 201408-14 for more information.

GLSA 201408-13: dev-python/jinja
Posted on August 29, 2014 by Gentoo Security Team

Clock

Jinja2: Multiple vulnerabilities
Multiple vulnerabilities have been found in Jinja2, allowing local attackers to escalate their privileges.
See GLSA 201408-13 for more information.

GLSA 201408-12: www-servers/apache
Posted on August 29, 2014 by Gentoo Security Team

Clock

Apache HTTP Server: Multiple vulnerabilities
Multiple vulnerabilities have been discovered in Apache HTTP Server, the worse of which could lead to execution of arbitrary code or a Denial of Service condition
See GLSA 201408-12 for more information.

GLSA 201408-11: dev-lang/php
Posted on August 29, 2014 by Gentoo Security Team

Clock

PHP: Multiple vulnerabilities
Multiple vulnerabilities have been discovered in PHP, the worst of which could lead to remote execution of arbitrary code.
See GLSA 201408-11 for more information.

GLSA 201408-10: dev-libs/libgcrypt
Posted on August 29, 2014 by Gentoo Security Team

Clock

Libgcrypt: Side-channel attack
A vulnerability in Libgcrypt could allow a remote attacker to extract ElGamal private key information.
See GLSA 201408-10 for more information.

New Packages
Posted on August 29, 2014 by packages.gentoo.org

Larry the Cow
sys-block/raid-check-20140719 Script to do "scrubbing" on software RAID systems
app-admin/eselect-rust-0.1_pre20140820 eselect module for rust
app-portage/gs-pypi-0.1 g-sorcery backend for pypi packages
app-portage/gs-elpa-0.1.1 g-sorcery backend for elisp packages
app-portage/g-sorcery-0.1-r1 framework for ebuild generators
sys-apps/tuned-2.3.0 Daemon for monitoring and adaptive tuning of system devices
www-apps/jekyll-sitemap-0.5.1 Automatically generate a sitemap.xml for your Jekyll site
dev-python/certifi-14.05.14 Python package for providing Mozilla's CA Bundle
dev-ruby/globalid-0.2.3 Reference models by URI
sci-visualization/yt-3.0 Astrophysical Simulation Analysis and Vizualization package

Blog posts
Posted between August 29, 2014 and June 4, 2014 by planet.gentoo.org

Planet Earth
Alexys Jacob Using uWSGI and Consul to design a distributed application
Consul on Gentoo Linux
Andreas K. Hüttel EAPI=5 adoption has reached 50% of ebuilds in the portage tree
Perl in Gentoo: Upgrading pains, perl-cleaner, and EAPI=5
Perl in Gentoo: dev-lang/perl, virtuals, and perl-core packages
Please test =app-admin/perl-cleaner-2.14
Anthony Basile Constructing a “Directed Linkage Graph” for an entire system: The usefulness of exporting /var/db/pkg (VDB) information for utilities other than the Package Management System (PMS).
Continued support for the Lemote Yeeloong: Gentoo Mips is alive and well!
Diego E. Pettenò LibreSSL: drop-in and ABI leakage
LibreSSL and the bundled libs hurdle
LibreSSL is taking a beating, and that's good
A new XBMC box
Fabio Erculiani Important: Sabayon x86 (32bit) is being deprecated
Gentoo Haskell Herd unsafePerformIO and missing NOINLINE
Gentoo Monthly Newsletter Gentoo Monthly Newsletter: July 2014
Gentoo Monthly Newsletter: June 2014
Hanno Böck LibreSSL on Gentoo
Michael Palimaka Reviving the tinderbox
Michał Górny The Council and the Community
Inlining -march=native for distcc
Patrick Lauer Biggest ebuilds in-tree
Building Everything
EAPI statistics, again
A one-line Tinderbox
Pavlos Ratis Accepted for Google Summer of Code 2014
Paweł Hajdan, Jr. Can your distro compile Chromium?
Recovering from removed libgcc_s.so.1 (and missing busybox)
Rafael Goncalves Martins Introducing pyoembed
Remi Cardona Mumblings about Gnome 3.12, geolocation and gsettings/dconf
Richard Freeman Quick systemd-nspawn guide
Sebastian Pipping EGF Xiangqi file format tool and documentation
freshplayerplugin (Chrome Flash for Firefox) in Gentoo betagarden, uses uriparser
Sven Vermeulen Gentoo Hardened august meeting
Switching to new laptop
Some changes under the hood
Gentoo Hardened July meeting
Segmentation fault when emerging packages after libpcre upgrade?
Multilib in Gentoo
Gentoo Hardened, June 2014

Gentoo Monthly Newsletter - May 2014
Posted on June 2, 2014 by Markos Chandras

gentoo

The May 2014 GMN issue is now available online.

This month on GMN:

  • Interview with Gentoo developer Brian Dolbec (dol-sen)
  • Samba 4, sys-power/upower updates, infrastructure hosting needs
  • Latest Gentoo news, tips, interesting stats and much more.

Action required: Password reset on all Gentoo services
Posted on April 13, 2014 by Alex Legler

gentoo

Recent versions of OpenSSL were found to be affected by an information disclosure vulnerability related to TLS heartbeats, nicknamed Heartbleed. It allows attackers to read up to 64kb of random server memory, possibly including passwords, session IDs or even private keys.

After the public disclosure on April 7, we have confirmed that several services provided by Gentoo Infrastructure were vulnerable as well. We have immediately updated the affected software, recreated private keys, reissued certificates, and invalidated all running user sessions. Despite these measures, we cannot exclude the possibility of attackers exploiting the issue during the time it was not publicly known to gain access to credentials or session IDs of our users. There are currently no indications this has happened.

However, to be safe, we are asking you to reset your passwords used for Gentoo services within the next 7 days. You need to take action if you have an account on one of the following sites:

  • blogs.gentoo.org
  • bugs.gentoo.org
  • forums.gentoo.org
  • wiki.gentoo.org

After 7 days, we will be removing all passwords to avoid abuse. For more information and the full announcement, visit http://infra-status.gentoo.org/notice/20140413-heartbleed.

Gentoo Monthly Newsletter - March 2014
Posted on April 1, 2014 by David Abbott

gentoo

The March 2014 GMN issue is now available online.

This month on GMN:

  • Interview with Gentoo developer Tom Wijsman (TomWij)
  • Tracking the history of Gentoo: Gentoo Galaxy
  • Latest Gentoo news, tips, interesting stats and much more.

Gentoo Monthly Newsletter - February 2014
Posted on March 1, 2014 by David Abbott

gentoo

The February 2014 GMN issue is now available online.

This month on GMN:

  • Interview with Gentoo developer Sven Vermeulen (swift)
  • Latest Gentoo news, job openings, interesting stats and much more.

Gentoo Monthly Newsletter - January 2014
Posted on February 1, 2014 by David Abbott

gentoo

The January 2014 GMN issue is now available online.

This month on GMN:

  • Meet up with Gentoo developers and users at this years FOSDEM'14 event.
  • Give back by helping the proxy-maintainers project.
  • Latest Gentoo news, job openings, interesting stats and much more.

Gentoo Monthly Newsletter - December 2013
Posted on January 2, 2014 by Markos Chandras

gentoo

The December 2013 GMN issue is now available online. This month on GMN:

  • Interview with Sergey Popov. A Gentoo developer and the team leader of Qt, proxy-maintainers and desktop-effects teams.
  • Overall Gentoo activity status with bugzilla, portage and developer statistics.

Gentoo Monthly Newsletter - November 2013
Posted on December 1, 2013 by Markos Chandras

gentoo

The November 2013 GMN issue is now available online. This month on GMN:

  • Interview with Richard Freeman. A Gentoo developer, Council and Trustees member.
  • Gentoo as a development environment for newcomers.
  • Overall Gentoo activity status with bugzilla, portage and developer statistics.

Imagination Technologies donates MIPS64 build systems
Posted on August 24, 2013 by Robin H. Johnson

gentoo
Imagination Technologies

Imagination Technologies has donated two MIPS64-based Ubiquiti ERLite-3 routers, plus resources to aid Gentoo in providing up-to-date root file system builds for MIPS.

Imagination Technologies is a global leader in multimedia, processor and communication technologies. The company creates and licenses market-leading IP solutions for graphics, video and vision, CPU/general purpose processing, multi-standard communications and connectivity, and cross-platform voice and video communications. Imagination's MIPS CPU cores and architectures range from solutions for ultra low-power 32-bit microcontrollers to high-performance 32/64-bit advanced applications and network processing. MIPS is supported by a broad ecosystem of tools and software including open source Linux distributions like Gentoo.

Gentoo at LinuxTag 2013 in Berlin
Posted on May 8, 2013 by David Abbott

gentoo

LinuxTag 2013 runs from May 22nd to May 25th in Berlin, Germany. With more than 10,000 visitors last year, it is one of the biggest Linux and open source events in Europe.

You will find the Gentoo booth at Hall 7.1c, Booth 179. Come and visit us! You will meet many of our developers and users, talk with us, plus get some of the Gentoo merchandise you have always wanted.




Donate to support our development efforts.

Copyright 2001-2014 Gentoo Foundation, Inc. Questions, Comments? Contact us.