sys-apps/

portage

Security Bug Reports

• <sys-apps/portage-3.0.81.2: Insufficient sandboxing

  979026 - Assigned to Gentoo Security
• <sys-apps/portage-3.0.81.1: EbuildIpcDaemon pickle deserialisation allows arbitrary code execution as root outside of sandbox

  978478 - Assigned to Gentoo Security
• <sys-apps/portage-3.0.47: dispatch-conf race condition with chmod on log file access

  904895 - Assigned to Gentoo Security
• sys-apps/portage uses /var/tmp insecurely

  853283 - Assigned to Gentoo Security
• sys-apps/portage: order of installed packages may result in vary directories permissions, leading to crontab not requiring acct-group/cron group membership as example

  607430 - Assigned to Gentoo Security