news.debuntu.org

Debian has updated strongswan
(authentication bypass).

Fedora has updated mediawiki (F18; F17:
multiple vulnerabilities) and qemu (host
file disclosure).

Mandriva has updated apache-mod_security (file disclosure, denial
of service), krb5 (ES 5.0;

Wayland developer Kristian Høgsberg has sent out a message detailing his
plans for Wayland 1.2 and beyond. "What I'd like to do is to release a new major version
every quarter. So we'll be aiming for 1.2 end of June, 1.3 end of
September and so on. The motivation for this is that we have a lot of
new features and new protocol in the works and a time-based release
schedule is a good way to flush out those features.

The Linux Foundation has announced
that it will be supporting three kernel internships for the upcoming
Outreach Program for Women cycle. "The official deadline for
applying to OPW is May 1st. However, the kernel project joined late, so
that deadline is flexible.

Fedora has updated haproxy (F18; F17: code
execution), php-twig-Twig (F18; F17: file disclosure), and kernel (F18: multiple vulnerabilities).

Mandriva has updated util-linux
(information disclosure) and fuse (denial
of service).

Andy Lutomirski has posted a description of a set of security
vulnerabilities fixed in recent stable updates. One is a fairly severe
user namespace vulnerability that appeared in the 3.8 kernel; another dates
back to 2.6.36. Exploit code is included.

Linus has announced the release of the 3.9
kernel. "Anyway. Whatever the reason, this week has been very quiet, which
makes me much more comfortable doing the final 3.9 release, so I guess
the last -rc8 ended up working.

Version 7.6 of the GDB debugger is out. New features include 64-bit ARM
support, an update of the C++ ABI to the GNU v3 version (" This has
been the default for GCC since November 2000"), some Python
scripting improvements, a number of new options, and more.

A fresh batch of new stable kernels is now available. Greg
Kroah-Hartman has released 3.8.9, 3.4.42, and 3.0.75, while Ben Hutchings has released
3.2.44. Each release includes the usual
battery of important fixes and updates.

CentOS has updated mysql (C6;
multiple vulnerabilities).

Fedora has updated qemu (F18;
host file disclosure).

Mandriva has updated curl
(session hijacking) and subversion (ES5, BS1;
multiple vulnerabilities).

openSUSE has updated icedtea-web (multiple vulnerabilities).

Hot on the heels of a successful Kickstarter campaign, the OpenShot video editor project has announced its schedule (still targeting December 2013, more detailed plan coming soon) and a switch to Qt 5. "One of the biggest decisions we have made so far is to switch the user interface toolkit that OpenShot uses from GTK+ to Qt. We have carefully considered our options, and our team believes it is the only reasonable path forward.