We produce Gentoo Linux, a special flavor of Linux that can be automatically optimized and customized for just about any application or need. Extreme performance, configurability and a top-notch user and developer community are all hallmarks of the Gentoo experience. To learn more, read our about page.
Action required: Password reset on all Gentoo services
Recent versions of OpenSSL were found to be affected by an information disclosure vulnerability related to TLS heartbeats, nicknamed Heartbleed. It allows attackers to read up to 64kb of random server memory, possibly including passwords, session IDs or even private keys.
After the public disclosure on April 7, we have confirmed that several services provided by Gentoo Infrastructure were vulnerable as well. We have immediately updated the affected software, recreated private keys, reissued certificates, and invalidated all running user sessions. Despite these measures, we cannot exclude the possibility of attackers exploiting the issue during the time it was not publicly known to gain access to credentials or session IDs of our users. There are currently no indications this has happened.
However, to be safe, we are asking you to reset your passwords used for Gentoo services within the next 7 days. You need to take action if you have an account on one of the following sites:
After 7 days, we will be removing all passwords to avoid abuse. For more information and the full announcement, visit http://infra-status.gentoo.org/notice/20140413-heartbleed.
GLSA 201404-07: dev-libs/openssl
OpenSSL: Information Disclosure
GLSA 201404-06: media-libs/mesa
Mesa: Multiple vulnerabilities
GLSA 201404-05: net-fs/openafs
OpenAFS: Multiple vulnerabilities
GLSA 201404-04: dev-ruby/crack
Crack: Arbitrary code execution
GLSA 201404-03: media-gfx/optipng
OptiPNG: User-assisted execution of arbitrary code
GLSA 201404-02: net-libs/libproxy
libproxy: User-assisted execution of arbitrary code
GLSA 201404-01: net-print/cups
CUPS: Arbitrary file read/write
Gentoo Monthly Newsletter - March 2014
The March 2014 GMN issue is now available online.
This month on GMN:
GLSA 201403-08: dev-perl/PlRPC
PlRPC: Arbitrary code execution
GLSA 201403-07: sys-apps/grep
grep: User-assisted execution of arbitrary code
Gentoo Monthly Newsletter - February 2014
The February 2014 GMN issue is now available online.
This month on GMN:
Gentoo Monthly Newsletter - January 2014
Gentoo Monthly Newsletter - December 2013
The December 2013 GMN issue is now available online. This month on GMN:
Gentoo Monthly Newsletter - November 2013
The November 2013 GMN issue is now available online. This month on GMN:
Imagination Technologies donates MIPS64 build systems
Imagination Technologies has donated two MIPS64-based Ubiquiti ERLite-3 routers, plus resources to aid Gentoo in providing up-to-date root file system builds for MIPS.
Imagination Technologies is a global leader in multimedia, processor and communication technologies. The company creates and licenses market-leading IP solutions for graphics, video and vision, CPU/general purpose processing, multi-standard communications and connectivity, and cross-platform voice and video communications. Imagination's MIPS CPU cores and architectures range from solutions for ultra low-power 32-bit microcontrollers to high-performance 32/64-bit advanced applications and network processing. MIPS is supported by a broad ecosystem of tools and software including open source Linux distributions like Gentoo.
Gentoo at LinuxTag 2013 in Berlin
LinuxTag 2013 runs from May 22nd to May 25th in Berlin, Germany. With more than 10,000 visitors last year, it is one of the biggest Linux and open source events in Europe.
You will find the Gentoo booth at Hall 7.1c, Booth 179. Come and visit us! You will meet many of our developers and users, talk with us, plus get some of the Gentoo merchandise you have always wanted.
Gentoo at FOSSCOMM 2013
What? FOSSCOMM 2013
Free and Open Source Software COMmunities Meeting(FOSSCOMM) 2013
When? 20th, April 2013 - 21st, April 2013
Where? Harokopio University, Athens, Greece
FOSSCOMM 2013 is almost here, and Gentoo will be there!
We will have a booth with Gentoo promo stuff, stickers, flyers, badges, live DVD's and much more! Whether you're a developer, user, or simply curious, be sure and stop by. We are also going to represent Gentoo in a round table with other foss communities. See you there!
Pavlos Ratis contributed the draft for this announcement.
|Copyright 2001-2014 Gentoo Foundation, Inc. Questions, Comments? Contact us.|