sys-devel

Security Bug Reports

• sys-devel/binutils: Multiple vulnerabilities

  661154 - Assigned to Gentoo Security
• sys-devel/patch: Double free allowing DoS in another_hunk (CVE-2019-20633)

  714750 - Assigned to Gentoo Security
• sys-devel/flex: Stack exhaustion in mark_beginning_as_normal causing denial of service (CVE-2019-6293)

  717714 - Assigned to Gentoo Security
• <sys-devel/gcc-{6.5.0,7.4.1,8.3.1,9.2.1,10.0}: Flawed code generation on POWER9 (CVE-2019-15847)

  719466 - Assigned to Gentoo Security
• <sys-devel/gcc-{9.4.0,10.3.0,11.1.0}: Straight Line Speculation mitigation for ARMv8 (CVE-2020-13844)

  727608 - Assigned to Gentoo Security
• <sys-devel/clang-11.0.0: Straight Line Speculation mitigation for ARMv8 (CVE-2020-13844)

  727610 - Assigned to Gentoo Security
• sys-devel/clang: Unicode "bidirectional override" vulnerabilities (CVE-2021-42574)

  821181 - Assigned to Gentoo Security
• <sys-devel/gcc-12.1.0: Unicode "bidirectional override" (CVE-2021-42574)

  821220 - Assigned to Gentoo Security
• sys-devel/patch: invalid free vulnerability

  829835 - Assigned to Gentoo Security
• <sys-devel/gcc-12.1.0: uncontrolled recursion in libiberty/rust-demangle.c

  831225 - Assigned to Gentoo Security
• <sys-devel/gcc-13.0.0_pre20220710: stack overflow in libiberty rust-demangle

  836239 - Assigned to Gentoo Security
• <sys-devel/binutils-2.41 : heap buffer overread

  908087 - Assigned to Gentoo Security
• sys-devel/gcc: Stack protection and stack clash protection ineffective for VLAs on arm64 (-fstack-protector* and -fstack-clash-protection)

  914070 - Assigned to Gentoo Security