app-crypt

Security Bug Reports

• <app-crypt/gnupg-{2.4.9, 2.5.10}: denial of service issue (resource consumption) using compressed packets

  861446 - Assigned to Gentoo Security
• <app-crypt/tpm2-tss-3.2.2: Buffer Overflow in TSS2_RC_Decode

  891519 - Assigned to Gentoo Security
• <app-crypt/tpm2-tss-4.0.2: Unchecked magic number in verify quote

  931055 - Assigned to Gentoo Security
• <app-crypt/tpm2-tools-5.6.1: Missing comparison of PCR selection and uncheck magic number in verify quote

  931056 - Assigned to Gentoo Security
• <app-crypt/mit-krb5-1.21.3 vulnerabilities in GSS message token handling

  934994 - Assigned to Gentoo Security
• <app-crypt/age-1.2.1: Arbitrary Binary Execution

  955439 - Assigned to Gentoo Security
• <app-crypt/gnupg-2.5.16, <app-crypt/freepg-2.5.16: Cleartext Signature Forgery in the NotDashEscaped header

  968171 - Assigned to Gentoo Security
• <app-crypt/age-1.3.1: may output binary to terminal

  968204 - Assigned to Gentoo Security
• app-crypt/minisign: Trusted comment Injection

  968209 - Assigned to Gentoo Security
• <app-crypt/gnupg-2.5.17, <app-crypt/freepg-2.5.17: Multiple vulnerabilities

  969320 - Assigned to Gentoo Security
• <app-crypt/p11-kit-0.26.2: Null pointer dereference

  969878 - Assigned to Gentoo Security
• <app-crypt/gnupg-2.5.20: Multiple vulnerabilities

  974896 - Assigned to Gentoo Security
• app-crypt/veracrypt: multiple vulnerabilities

  977502 - Assigned to Gentoo Security
• <app-crypt/tpm2-tss-{4.1.4,4.2.0}: Multiple vulnerabiltites

  979303 - Assigned to Gentoo Security
• <app-crypt/tpm2-tools-{5.7.1,5.8}: Multiple vulnerabilities

  979304 - Assigned to Gentoo Security
• <app-crypt/p11-kit-0.26.4: Stack exhaustion (denial of service)

  979436 - Assigned to Gentoo Security