Gentoo Developer

Patrick McLean

Security Bug Reports

• app-text/tesseract: use after free vulnerability (CVE-2021-36081)

  799791 - Assigned to Gentoo Security
• <app-admin/salt-3003.3: multiple vulnerabilities (CVE-2021-{21996,31607})

  812440 - Assigned to Gentoo Security
• <dev-libs/libbpf-0.7.0: multiple vulnerabilities

  830368 - Assigned to Gentoo Security
• sys-cluster/ceph: volume does not respect configured osd_dmcrypt_key_size

  831047 - Assigned to Gentoo Security
• <net-vpn/openvpn-2.5.6: potential authentication by-pass with multiple deferred authentication plug-ins

  835514 - Assigned to Gentoo Security
• dev-util/wachy: 'cargo audit' reports one or more bundled CRATES as vulnerable

  864076 - Assigned to Gentoo Security
• net-dns/dnsmasq: write-after-free DoS in dhcpv6

  867322 - Assigned to Gentoo Security
• sys-cluster/ceph: root privilege escalation via ceph-crash.service

  878277 - Assigned to Gentoo Security
• <app-arch/pxz-5.0_pre20220509: Race condition in setting permissions on output file

  881377 - Assigned to Gentoo Security
• <net-dns/bind-9.16.37: multiple vulnerabilities

  891329 - Assigned to Gentoo Security
• net-dns/dnsmasq: excessive EDNS.0 UDP packet size limit

  905321 - Assigned to Gentoo Security
• sys-cluster/ceph: RGW crash

  905339 - Assigned to Gentoo Security
• <net-dns/bind-9.16.42: Multiple vulnerabilities

  912265 - Assigned to Gentoo Security