OpenRC, the replacement for Gentoo's current services system (known as baselayout), will be stabilized on May 8. It replaces the previous bash-only rc system in baselayout with an rc system that has a C-based core and uses only POSIX-compliant shell code.

You will see an update for sys-apps/baselayout to 2.x and a new package, sys-apps/openrc. It is recommended that you perform this update as soon as possible.

After these packages are emerged, it is absolutely critical that you immediately update your configuration files with dispatch-conf, etc-update or a similar tool then follow the steps in the OpenRC Migration Guide.

Failure to follow all of these steps will result in an unbootable system. If that happens, you will need to boot from a LiveCD or LiveDVD, mount your root filesystem, chroot into that environment and follow the above steps.

Christian Faulhammer and William Hubbs contributed this announcement.

After a lot of bug-wrangling both by upstream and by our Qt and KDE teams, we now feel confident that Qt 4.7.2 and KDE 4.6.2 are ready for stabilization. If you are a stable tree user (amd64, ppc, x86), the upgrade from current Qt 4.6.3 and KDE 4.4.5 will arrive at your machine soon, with lots of new features. (The KDEPIM applications such as kmail, kontact, or akregator will stay at trusty version 4.4 since development there is still ongoing.)

As a special bonus, the stable upgrade will also include newer versions of several popular applications that take advantage of KDE 4.6 features. These include Digikam 1.9.0, KOffice 2.3.3, and KDevelop 4.2.2. There is a new bluetooth framework called Bluedevil, we no longer need HAL, and, and, and... :)

The upgrade should go very smoothly; if you encounter any problems, we have a specific Gentoo KDE 4.4 - 4.6 upgrade guide to help you with that. In addition, there is always the Gentoo KDE guide with general tips and tricks.

Thanks to everyone who made this possible!

Gentoo has been accepted for its 6th consecutive year in the Google Summer of Code! GSoC pays college students $5000 to work full-time on an open-source project for a summer. Check out our GSoC 2011 homepage if you are interested in this year's GSoC for Gentoo. We particularly encourage applications from students who are new to Gentoo development—many of our students become Gentoo developers after a successful summer.

Interested students can browse Gentoo's project ideas. Student applications will be accepted starting March 28 until April 8.

Developers, if you'd like to apply to be a mentor, you can do so on the webapp. Please read the mentoring guide before applying.

Software in the making edition

Gentoo Linux is proud to announce the availability of a new LiveDVD to celebrate the continued collaboration between Gentoo users and developers. The LiveDVD features a superb list of packages, some of which are listed below.

• System packages include: Linux Kernel 2.6.37 (with Gentoo patches), Accessibility Support with Speakup 3.1.6, bash 4.1, glibc 2.12.2, gcc 4.5.2, binutils 2.21, python 2.7.1 and 3.1.3, perl 5.12.3, and more.
• Desktop environments and window managers include: KDE SC 4.6, GNOME 2.32, Xfce 4.8, Enlightenment 1.0.7, Openbox 3.4.11.2, Fluxbox 1.3.1, XBMC 10.0 and more.
• Office, graphics, and productivity applications include: OpenOffice 3.2.1, XEmacs 21.5.29 gVim 7.3.102, Abiword 2.8.6, GnuCash 2.2.9, Scribus 1.9.3, GIMP 2.6.11, Inkscape 0.48.1, Blender 2.49b, XSane 0.997, and much more.
• Web browsers include: Mozilla Firefox 3.6.13, Arora 0.11.0, Opera 11.0, Epiphany 2.30.6, Seamonkey 2.0.11, and other favorites.
• Communication tools include: Pidgin 2.7.10, Quassel 0.7.1, Mozilla Thunderbird 3.1.7, Claws Mail 3.7.8, Qtwitter 0.10.0, irssi 0.8.15, and many more.
• Development applications include: KDevelop 4.2, KDESvn 1.5.5, qt-creator 2.1.0, Bluefish 2.0.2, and many more.
• Multimedia applications include: Amarok 2.4, MPlayer 1.0_rc4, DVDAuthor 0.6.14, LAME 3.98.4, ffmpeg 0.6, GNOME-MPlayer 1.0.0, SMPlayer 0.6.9, and several others.
• Special Features:
  • Writable AUFS support so you can emerge new packages!
  • Persistancy for $HOME is available; press F9 for more info!

The LiveDVD is available in two flavors: a hybrid x86/x86_64 version, and an x86_64 multilib version. The livedvd-x86-amd64-32ul-11.0 version will work on 32-bit x86 or 64-bit x86_64. If your CPU architecture is x86, then boot with the default gentoo kernel. If your arch is amd64 boot with the gentoo64 kernel. This means you can boot a 64bit kernel and install a customized 64bit userland while using the provided 32bit userland. The livedvd-amd64-multilib-11.0 version is for x86_64 only.

Please select your architecture to be redirected to a mirror for download:

• x86
• amd64
• Torrents are available at http://torrents.gentoo.org

Please read the FAQ on using the LiveDVD.

We have also started a discussion thread in our forum. Please post any bugs you encounter.

Thank you for your continued support,
Gentoo Linux Developers, the Gentoo Linux Foundation, and the Gentoo-Ten Project.

SCALE 9x is almost here, and Gentoo will be there!

Southern California's premier open-source software event is just around the corner, running from Friday, February 25 through Sunday, February 27. Several Gentoo developers will be there; it will be even bigger than last year.

We'll be showing off some nifty devices running Gentoo, and we'll be giving out installation media. Whether you're a developer, user, or simply curious, be sure and stop by booth #52. See you there!

Discuss this!

Adobe Flash Player: Multiple vulnerabilities
Multiple vulnerabilities in Adobe Flash Player might allow remote attackers to execute arbitrary code or cause a Denial of Service.
See GLSA 201101-09 for more information.

Adobe Reader: Multiple vulnerabilities
Multiple vulnerabilities in Adobe Reader might result in the execution of arbitrary code.
See GLSA 201101-08 for more information.

Prewikka: password disclosure
Due to a world-readable file, a local attacker can obtain the SQL database password used by Prewikka.
See GLSA 201101-07 for more information.

IO::Socket::SSL: Certificate validation error
An error in the hostname matching of IO::Socket::SSL might enable remote attackers to conduct man-in-the-middle attacks.
See GLSA 201101-06 for more information.

OpenAFS: Arbitrary code execution
The cache manager of OpenAFS contains several bugs resulting in remote execution of arbitrary code.
See GLSA 201101-05 for more information.

aria2: Directory traversal
A directory traversal vulnerability has been found in aria2.
See GLSA 201101-04 for more information.

libvpx: User-assisted execution of arbitrary code
Timothy B. Terriberry discovered that libvpx contains an integer overflow vulnerability in the processing of video streams that may allow user-assisted execution of arbitrary code.
See GLSA 201101-03 for more information.

Tor: Remote heap-based buffer overflow
Tor is vulnerable to a heap-based buffer overflow that may allow arbitrary code execution.
See GLSA 201101-02 for more information.

gif2png: User-assisted execution of arbitrary code
gif2png contains a stack overflow vulnerability when parsing command line arguments.
See GLSA 201101-01 for more information.

This week Gentoo Foundation joined Open Invention Network as a licensee. OIN is an organization which helps protect the Linux ecosystem by building a variety of defenses against patent attacks. These defenses include both traditional mechanisms, like defensive patent pools, and more innovative approaches, like the Linux Defenders project, which uses a variety of methods to pro actively prevent the publication of particularly egregious patents. As a licensee, we’ll have access to OIN resources in case we’re threatened by operating entities with patents, and over time we’ll likely become more involved in providing our own ideas and resources to OIN projects.

Patents owned by Open Invention Network are available royalty-free to any company, institution or individual that agrees not to assert its patents against the Linux System. By joining, Gentoo receives cross-licenses from other OIN licensees, but more importantly, for the long term, it affords us a chance to work with OIN in reducing IP threats to open source development and innovation. This may include a defensive publications program that would make it harder for others to patent work created by Gentoo contributors, sharing defensive tactics, and cooperation to minimize patent threats.

We believe that by becoming an Open Invention Network licensee, we encourage continued open source development and foster innovation in a technical community that benefits everyone. We recognize the importance of participating in a substantial community of Linux supporters and leveraging the Open Invention Network to further spur open source innovation.

Vilhelm and his team members:

• Sebastian Hallén
• Alex Werther
• Johan Hyldentong

Picked Gentoo to play for and won Robot Fight Night, so $400 US was donated to the Gentoo Foundation to pay for Gentoo Development and Services, etc.

Vilhelm I believe made the suggestion to the others to play for Gentoo and they accepted.

Hi Vilhelm, is that about right?

That's absolutely correct. We got to choose an open source project to fight for and I pitched Gentoo to my friends who gladly accepted.

If you would like to hear more from Vilhelm and his use of Gentoo, check out the complete interview.

What? OpenRheinRuhr II - Ein Pott voll Software

When? 13th, November 2010 - 14th, November 2010

Where? Rheinisches Industriemuseum | Hansastraße 20 | Oberhausen, Germany

OpenRheinRuhr is almost here, and Gentoo will be there!

Whether you're a developer, user, or simply curious, be sure and stop by our Gentoo booth. We will have Gentoo and Larry t-shirts, plus much more! See you there!

What: Larry the cow t-shirt graphics contest ...

Where: irc.freenode.net, #gentoo-artwork

Starts: Wed, Sep 01, 2010

Ends: Sun, Oct 31, 2010

Introduction:

Larry the cow is our prized mascot and he is not getting the respect he deserves. Just about every other Linux distribution, their mascot is adorned on t-shirts and other types of schwag, but not our Larry, he cannot even decide his gender. Please help up fix this terrible injustice by entering our contest and provide Larry the graphics he deserves. For more information visit this Forum Post.

The top 3 contestants will receive three t-shirts in their design, donated by the Gentoo Foundation. The judging panel includes Dawid Węgliński, Alex Legler, and your host David Abbott.

Requirments:

Preferred format is scalable vector graphics (SVG) but any of the industry standard vector graphics formats will be accepted.

How to Enter?

Please email your graphics to artwork@g.o

1. By making a submission to the contest, you agree to give unlimited, non-exclusive rights to the Gentoo Foundation for your submission.
2. This may include relicensing or trademarking the content the if required to protect it from unfair commercial usage.
3. You may, at your own discretion, also provide the content to any other party under some form of open license (including, but not limited to the full range of Creative Commons licenses, including re-sampling)
4. The Foundation needs to be informed of any future licensing.