Gentoo Developer

Michał Górny

Security Bug Reports

• net-misc/minidlna: remote DoS and memory corruption

  736226 - Assigned to Gentoo Security
• dev-libs/libtomcrypt: Out of bounds read (CVE-2019-17362)

  761412 - Assigned to Gentoo Security
• <app-arch/lz4-1.9.3-r1: Memory corruption due to an integer overflow (CVE-2021-3520)

  791952 - Assigned to Gentoo Security
• <net-misc/minidlna-1.3.1: DNS rebinding vulnerability

  834642 - Assigned to Gentoo Security
• <app-arch/libarchive-3.6.1-r1: null pointer dereference

  882521 - Assigned to Gentoo Security
• <app-arch/advancecomp-2.4: multiple vulnerabilities

  882571 - Assigned to Gentoo Security
• <dev-libs/libgit2-1.5.1[ssh]: fails to verify SSH keys by default

  891525 - Assigned to Gentoo Security
• <media-gfx/cairosvg-2.7.0: fetches arbitrary resources from SVG files by default

  902491 - Assigned to Gentoo Security
• <net-misc/minidlna-1.3.3: remote code execution

  907926 - Assigned to Gentoo Security
• app-arch/advancecomp: segmentation fault

  908080 - Assigned to Gentoo Security
• <app-arch/libarchive-3.7.1: SEGV and stack buffer overflow in verbose mode of cpio

  911486 - Assigned to Gentoo Security