app-crypt

Security Bug Reports

• <app-crypt/gnupg-{2.4.9, 2.5.10}: denial of service issue (resource consumption) using compressed packets

  861446 - Assigned to Gentoo Security
• <app-crypt/tpm2-tss-3.2.2: Buffer Overflow in TSS2_RC_Decode

  891519 - Assigned to Gentoo Security
• <app-crypt/tpm2-tss-4.0.2: Unchecked magic number in verify quote

  931055 - Assigned to Gentoo Security
• <app-crypt/tpm2-tools-5.6.1: Missing comparison of PCR selection and uncheck magic number in verify quote

  931056 - Assigned to Gentoo Security
• <app-crypt/mit-krb5-1.21.3 vulnerabilities in GSS message token handling

  934994 - Assigned to Gentoo Security
• <app-crypt/age-1.2.1: Arbitrary Binary Execution

  955439 - Assigned to Gentoo Security
• <app-crypt/gnupg-{2.4.9, 2.5.14}, <app-crypt/freepg-2.5.16: Memory corruption in armor parser

  967884 - Assigned to Gentoo Security
• <app-crypt/gnupg-2.5.16, <app-crypt/freepg-2.5.16: Cleartext Signature Forgery in the NotDashEscaped header

  968171 - Assigned to Gentoo Security
• <app-crypt/age-1.3.1: may output binary to terminal

  968204 - Assigned to Gentoo Security
• app-crypt/minisign: Trusted comment Injection

  968209 - Assigned to Gentoo Security
• <app-crypt/gnupg-2.5.17, app-crypt/freepg: Multiple vulnerabilities

  969320 - Assigned to Gentoo Security