Gentoo Developer

Arthur Zamarin

Security Bug Reports

• dev-lang/nasm: multiple vulnerabilities

  686722 - Assigned to Gentoo Security
• dev-lang/nasm: multiple vulnerabilities

  810423 - Assigned to Gentoo Security
• <dev-libs/confuse-3.3-r2: Heap buffer overflow

  901089 - Assigned to Gentoo Security
• <app-arch/7zip-24.07: vulnerability in zstandard implementation

  945395 - Assigned to Gentoo Security
• <dev-lang/go-1.22.11, <dev-lang/go-1.23.5: multiple vulnerabilities

  948232 - Assigned to Gentoo Security
• <dev-lang/go-1.22.12,1.23.6}: crypto/elliptic: timing sidechannel for P-256 on ppc64le

  949405 - Assigned to Gentoo Security
• <dev-lang/go-1.24.3: os: Root permits access to parent directory

  955613 - Assigned to Gentoo Security
• <app-arch/7zip-25.00: multiple vulnerabilities

  960631 - Assigned to Gentoo Security
• <app-arch/7zip-25.01: Arbitrary file write via symlinks in archives

  961281 - Assigned to Gentoo Security
• <dev-lang/go-{1.24.9,1.25.3}: multiple vulnerabilities

  963930 - Assigned to Gentoo Security
• <app-containers/docker-compose-2.40.3: Path Traversal via OCI Artifact Layer Annotations

  965332 - Assigned to Gentoo Security
• <app-containers/containerd-{2.0.7,2.1.5}: multiple vulnerabilities

  965825 - Assigned to Gentoo Security
• <dev-lang/go-1.25.8: multiple vulnerabilities

  968833 - Assigned to Gentoo Security
• <dev-lang/go-1.25.8: multiple vulnerabilities

  970944 - Assigned to Gentoo Security
• <app-containers/docker-29.5.2: multiple vulnerabilities

  971888 - Assigned to Gentoo Security
• <dev-lang/go-{1.25.9,1.26.2}: Multiple vulnerabilities

  972528 - Assigned to Gentoo Security
• <dev-lang/go-1.26.3 and <dev-lang/go-1.25.10: multiple vulnerabilities

  974353 - Assigned to Gentoo Security
• <app-arch/7zip-26.01: Heap Buffer Write Overflow

  976172 - Assigned to Gentoo Security
• <app-containers/containerd-{2.2.5,2.3.2}: multiple vulnerabilities

  977695 - Assigned to Gentoo Security
• <app-arch/7zip-26.02: XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

  979307 - Assigned to Gentoo Security
• <dev-lang/go-{1.25.12,1.6.5}: os.Root escape via symlink + trailing /

  979521 - Assigned to Gentoo Security
• <dev-lang/go: crypto/tls-{1.25.12,1.26.5}: Encrypted Client Hello privacy leak

  979580 - Assigned to Gentoo Security
• <dev-lang/go-{1.25.13,1.26.6}: Multiple vulnerabilities

  980862 - Assigned to Gentoo Security