Gentoo Developer

Ionen Wolkens

Security Bug Reports

• <dev-python/adblock-0.6.0: 'cargo audit' reports one or more bundled CRATES as vulnerable

  864046 - Assigned to Gentoo Security
• <media-video/ffmpeg-4.4.4, <media-video/ffmpeg-5.1: null pointer dereference

  886497 - Assigned to Gentoo Security
• <media-video/ffmpeg-4.4.4, <media-video/ffmpeg-5.1: null pointer dereference

  890748 - Assigned to Gentoo Security
• <dev-libs/iniparser-4.1-r1: null pointer dereference

  907928 - Assigned to Gentoo Security
• <media-video/ffmpeg-6.1: OOB read

  918438 - Assigned to Gentoo Security
• <net-misc/yt-dlp-2026.02.21: arbitrary command injection with the --netrc-cmd option

  970421 - Assigned to Gentoo Security
• <net-misc/yt-dlp-2026.06.09: multiple vulnerabilities

  977141 - Assigned to Gentoo Security
• <media-video/ffmpeg-{4.4.8:0/56.58.58,6.1.6:0/58.60.60,7.1.5:0/59.61.61,8.1.2:0/60.62.62}, <media-video/ffmpeg-compat-{4.4.8:4,6.1.6:6,7.1.5:7}: "PixelSmash" out of bounds write in magicyuv

  978041 - Assigned to Gentoo Security
• <net-misc/yt-dlp-2026.07.04: Downstream command injection via improper sanitization of --write-link output

  978723 - Assigned to Gentoo Security