Gentoo Project

Virtualization Project

Security Bug Reports

• app-emulation/qemu: NULL pointer derefrence issues (CVE-2020-{25741,25742,25743})

  745396 - Assigned to Gentoo Security
• <sys-firmware/edk2-202105: privilege escalation with local access (CVE-2019-14584)

  797232 - Assigned to Gentoo Security
• <sys-firmware/edk2-202105: heap overflow vulnerability (CVE-2021-28211)

  797703 - Assigned to Gentoo Security
• <sys-apps/usbredir-0.12.0: use-after-free

  834010 - Assigned to Gentoo Security
• <app-emulation/qemu-8.0.0: multiple vulnerabilities

  865121 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.17.8: DoS via crafted packet

  869365 - Assigned to Gentoo Security
• app-emulation/qemu: multiple vulnerabilities

  877609 - Assigned to Gentoo Security
• <sys-firmware/ipxe-1.21.1_p20230601: padding oracle attack vulnerability

  882393 - Assigned to Gentoo Security
• <app-containers/lxc-5.0.2: file existence disclosure

  889284 - Assigned to Gentoo Security
• <dev-libs/libtpms-0.9.6: Out-of-bounds access

  898504 - Assigned to Gentoo Security
• app-emulation/qemu: multiple vulnerabilities

  905342 - Assigned to Gentoo Security
• <app-emulation/libvirt-9.3.0: large memory leak

  908042 - Assigned to Gentoo Security
• <app-emulation/libvirt-{9.3.0-r1,9.4.0-r4,9.5.0-r1,9.6.0}: libvirt daemon crash

  916497 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.17.9-r1: multiple vulnerabilities

  924129 - Assigned to Gentoo Security
• <app-emulation/libvirt-10.1.0: off-by-one error in udevListInterfacesByStatus()

  929965 - Assigned to Gentoo Security
• <app-emulation/libvirt-10.2.0: check for negative array lengths before allocation

  929966 - Assigned to Gentoo Security