Gentoo Developer

Matthew Smith

Security Bug Reports

• <dev-lang/nasm-2.16.01: use-after-free in paste_tokens in asm/preproc.c

  686720 - Assigned to Gentoo Security
• dev-lang/nasm: multiple vulnerabilities

  686722 - Assigned to Gentoo Security
• <dev-lang/erlang-23.1.1: httpd directory traversal (CVE-2020-25623)

  749345 - Assigned to Gentoo Security
• <dev-lang/erlang-23.2.2: Invalid TLS certificate validation (CVE-2020-35733)

  765796 - Assigned to Gentoo Security
• dev-lang/nasm: multiple vulnerabilities

  810423 - Assigned to Gentoo Security
• app-misc/weggli: 'cargo audit' reports one or more bundled CRATES as vulnerable

  864025 - Assigned to Gentoo Security
• <net-dns/knot-resolver-5.6.0: DoS via many TCP connections

  897928 - Assigned to Gentoo Security
• <dev-lang/nasm-2.16: heap buffer overflow

  903755 - Assigned to Gentoo Security
• <net-dns/knot-resolver-5.7.0: DoS via TCP reconnections (again)

  918587 - Assigned to Gentoo Security