Gentoo Project

Toolchain Project

Security Bug Reports

• sys-devel/binutils: Multiple vulnerabilities

  661154 - Assigned to Gentoo Security
• sys-libs/glibc: Multiple vulnerabilities (CVE-2019-{1010022,1010023,1010024})

  711318 - Assigned to Gentoo Security
• <sys-libs/musl-1.2.1-r1: wcsnrtombs destination buffer overflow (CVE-2020-28928)

  755695 - Assigned to Gentoo Security
• <sys-devel/gcc-12.1.0: Unicode "bidirectional override" (CVE-2021-42574)

  821220 - Assigned to Gentoo Security
• <dev-libs/gmp-6.2.1-r2: Buffer overflow (CVE-2021-43618)

  823804 - Assigned to Gentoo Security
• <sys-devel/gcc-12.1.0: uncontrolled recursion in libiberty/rust-demangle.c

  831225 - Assigned to Gentoo Security
• sys-devel/gcc: stack overflow in libiberty rust-demangle

  836239 - Assigned to Gentoo Security
• sys-devel/binutils: heap buffer overflow

  866713 - Assigned to Gentoo Security
• <sys-devel/binutils-2.39: multiple vulnerabilities

  867937 - Assigned to Gentoo Security
• <sys-libs/glibc-2.36-r5: oob heap memory read in crafted syslog'd strings

  867952 - Assigned to Gentoo Security
• =app-misc/pax-utils-1.3.6: heap overflow in ar_next (paxinc.c:96:20)

  890577 - Assigned to Gentoo Security
• <sys-devel/binutils-2.40: heap buffer overflow in bfd_getl64

  903893 - Assigned to Gentoo Security
• <sys-devel/binutils-2.41 : heap buffer overread

  908087 - Assigned to Gentoo Security
• sys-devel/gcc: Stack protection and stack clash protection ineffective for VLAs on arm64 (-fstack-protector* and -fstack-clash-protection)

  914070 - Assigned to Gentoo Security