Gentoo Developer

Bernard Cafarelli

Security Bug Reports

• <net-mail/ytnef-2.0: multiple vulnerabilities (CVE-2021-{3403,3404})

  774255 - Assigned to Gentoo Security
• app-text/tesseract: use after free vulnerability (CVE-2021-36081)

  799791 - Assigned to Gentoo Security
• <dev-libs/tinyxml-2.6.2-r5: infinite loop (CVE-2021-42260)

  817863 - Assigned to Gentoo Security
• www-apps/piwigo: SQL injections, XSS

  828581 - Assigned to Gentoo Security
• www-apps/piwigo: multiple vulnerabilities

  847979 - Assigned to Gentoo Security
• net-libs/libetpan: null pointer dereference

  891263 - Assigned to Gentoo Security
• www-apps/piwigo: sql injection via "Users" function

  908558 - Assigned to Gentoo Security
• <net-libs/nghttp2-1.57.0: HTTP/2 Rapid Reset vulnerability

  915554 - Assigned to Gentoo Security
• www-apps/piwigo: multiple vulnerabilities

  918534 - Assigned to Gentoo Security