LWN Headlines
Friday's security updates
Fedora has updated owncloud (multiple vulnerabilities).
Mageia has updated mesa (code execution).
Oracle has updated hypervkvpd (denial of service).
Red Hat has updated hypervkvpd (denial of service) and openstack-keystone (password disclosure).
Scientific Linux has updated hypervkvpd (denial of service).
Ubuntu has updated gpsd (code execution).
PacketFence 4.0 released
Fedora account system (FAS) potential information disclosure
We recommend (but do not require) that all users take this time to change their passwords, update their security questions/answers and review their other account information.
Three Ubuntu releases reach end of life
New Zealand Government Announces That Software Will No Longer Be Patentable (Forbes)
PyPy 2.0 released
Raspberry Pi operating systems: 5 reviewed and rated (Techradar)
We also want to gauge this from the point of view of someone who's not as familiar with Linux as others are, so they can jump into the project without too much hassle, and not end up leaving it feeling disheartened.
Security updates for Thursday
Fedora has updated phpmyadmin (F17; F18: two remote code execution flaws).
Mageia has updated ffmpeg (multiple vulnerabilities), wordpress (three vulnerabilities), ekiga, opal3, ptlib (denial of service), nrpe (code execution), x11-server (keystroke capture), glibc (two denial of service flaws), and libtiff (two vulnerabilities).
Ubuntu has updated telepathy-idle (13.04, 12.10, 12.04: certificate validation botch).
[$] LWN.net Weekly Edition for May 9, 2013
"Click packages" for Ubuntu
Stable kernel updates
Security advisories for Wednesday
Mandriva has updated glibc (ES 5.0: multiple vulnerabilities) and glibc (BS 1.0: denial of service).
SUSE has updated kernel (some SLE 11 SP2 products; other SLE 11 SP2 products: multiple vulnerabilities).
Ubuntu has updated openjdk-6 (multiple vulnerabilities).
[$] (Nearly) full tickless operation in 3.10
Garrett: A short introduction to TPMs
New stable kernels
A fresh batch of new stable kernels is now available. Greg Kroah-Hartman has released 3.8.9, 3.4.42, and 3.0.75, while Ben Hutchings has released 3.2.44. Each release includes the usual battery of important fixes and updates.
UPDATE: Greg Kroah-Hartman has subsequently released 3.8.10, which fixes a build error in 3.8.9 when compiling with user namespaces enabled.
Friday's security updates
CentOS has updated mysql (C6; multiple vulnerabilities).
Fedora has updated qemu (F18; host file disclosure).
Mandriva has updated curl (session hijacking) and subversion (ES5, BS1; multiple vulnerabilities).
openSUSE has updated icedtea-web (multiple vulnerabilities).
Oracle has updated mysql (multiple vulnerabilities).
Red Hat has updated mysql (multiple vulnerabilities).
Scientific Linux has updated mysql (SL6; multiple vulnerabilities).
Ubuntu has updated mysql (multiple vulnerabilities).

