We produce Gentoo Linux, a special flavor of Linux that can be automatically optimized and customized for just about any application or need. Extreme performance, configurability and a top-notch user and developer community are all hallmarks of the Gentoo experience. To learn more, read our about page.
GLSA 201408-07: media-libs/libmodplug
ModPlug XMMS Plugin: Multiple vulnerabilities
GLSA 201408-06: media-libs/libpng
libpng: Multiple vulnerabilities
GLSA 201408-05: www-plugins/adobe-flash
Adobe Flash Player: Multiple vulnerabilities
GLSA 201408-04: dev-util/catfish
Catfish: Multiple Vulnerabilities
GLSA 201408-03: net-libs/libssh
LibSSH: Information disclosure
GLSA 201408-02: media-libs/freetype
FreeType: Arbitrary code execution
GLSA 201408-01: dev-php/ZendFramework
Zend Framework: SQL injection
GLSA 201407-05: dev-libs/openssl
OpenSSL: Multiple vulnerabilities
GLSA 201407-04: app-crypt/gnupg
GnuPG: Denial of Service
Gentoo Monthly Newsletter - May 2014
The May 2014 GMN issue is now available online.
This month on GMN:
Action required: Password reset on all Gentoo services
Recent versions of OpenSSL were found to be affected by an information disclosure vulnerability related to TLS heartbeats, nicknamed Heartbleed. It allows attackers to read up to 64kb of random server memory, possibly including passwords, session IDs or even private keys.
After the public disclosure on April 7, we have confirmed that several services provided by Gentoo Infrastructure were vulnerable as well. We have immediately updated the affected software, recreated private keys, reissued certificates, and invalidated all running user sessions. Despite these measures, we cannot exclude the possibility of attackers exploiting the issue during the time it was not publicly known to gain access to credentials or session IDs of our users. There are currently no indications this has happened.
However, to be safe, we are asking you to reset your passwords used for Gentoo services within the next 7 days. You need to take action if you have an account on one of the following sites:
After 7 days, we will be removing all passwords to avoid abuse. For more information and the full announcement, visit http://infra-status.gentoo.org/notice/20140413-heartbleed.
Gentoo Monthly Newsletter - March 2014
The March 2014 GMN issue is now available online.
This month on GMN:
Gentoo Monthly Newsletter - February 2014
The February 2014 GMN issue is now available online.
This month on GMN:
Gentoo Monthly Newsletter - January 2014
Gentoo Monthly Newsletter - December 2013
The December 2013 GMN issue is now available online. This month on GMN:
Gentoo Monthly Newsletter - November 2013
The November 2013 GMN issue is now available online. This month on GMN:
Imagination Technologies donates MIPS64 build systems
Imagination Technologies has donated two MIPS64-based Ubiquiti ERLite-3 routers, plus resources to aid Gentoo in providing up-to-date root file system builds for MIPS.
Imagination Technologies is a global leader in multimedia, processor and communication technologies. The company creates and licenses market-leading IP solutions for graphics, video and vision, CPU/general purpose processing, multi-standard communications and connectivity, and cross-platform voice and video communications. Imagination's MIPS CPU cores and architectures range from solutions for ultra low-power 32-bit microcontrollers to high-performance 32/64-bit advanced applications and network processing. MIPS is supported by a broad ecosystem of tools and software including open source Linux distributions like Gentoo.
Gentoo at LinuxTag 2013 in Berlin
LinuxTag 2013 runs from May 22nd to May 25th in Berlin, Germany. With more than 10,000 visitors last year, it is one of the biggest Linux and open source events in Europe.
You will find the Gentoo booth at Hall 7.1c, Booth 179. Come and visit us! You will meet many of our developers and users, talk with us, plus get some of the Gentoo merchandise you have always wanted.
|Copyright 2001-2014 Gentoo Foundation, Inc. Questions, Comments? Contact us.|