Gentoo Linux Security Advisories

Multiple vulnerabilities have been discovered in PAM, the worst of which could lead to privilege escalation.

A vulnerability has been discovered in Spreadsheet-ParseExcel, which can lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which can lead to execution of arbitrary code.

A vulnerability has been discovered in FontForge, which can lead to arbitrary code execution.

A vulnerability has been discovered in NSS, which can lead to the recovery of private data.

Multiple vulnerabilities have been discovered in Composer, the worst of which can lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in Roundcube, the worst of which could lead to execution of arbitrary code.

Multiple vulnerabilities have been discovered in ClamAV, the worst of which could lead to arbitrary code execution.

A buffer overflow has been discovered in strongSwan, which can lead to remote code execution.

Multiple vulnerabilities have been discovered in NTP, the worst of which could lead to the execution of arbitrary code.

A heap overflow has been discovered in openh264, which can lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.

Multiple vulnerabilities have been discovered in REXML, the worst of which can lead to a denial of service.

Multiple vulnerabilities have been discovered in Git, the worst of which could lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in sudo, the worst of which could result in privilege escalation.

Multiple vulnerabilities have been discovered in UDisks, libblockdev, the worst of which could result in privilege escalation.

An integer overflow vulnerability has been found in sysstat which could result in arbitrary code execution.

An input sanitization flaw in Konsole might allow remote attackers to execute commands via a malicious URL

Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.

Multiple vulnerabilities have been found in LibreOffice, the worst of which could result in user-assisted code execution.

Multiple vulnerabilities have been discovered in Emacs, the worst of which could lead to arbitrary code execution.

A vulnerability has been discovered in Gtk+, which can lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in Qt, the worst of which can lead to arbitrary code execution.

Multiple vulberabilities have been discovered in Python and PyPy, the worst of which can lead to privilege escalation.

Multiple vulnerabilities have been discovered in Node.js, the worst of which can lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in OpenImageIO, the worst of which can lead to execution of arbitrary code.

A vulnerability has been discovered in File-Find-Rule, which can lead to shell injection.

A vulnerability has been discovered in YAML-LibYAML, which can lead to shell injection.

A vulnerability has been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation.

Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code.

A vulnerability has been discovered in FreeType, which can lead to remote code execution.

Multiple vulnerabilities have been discovered in Spidermonkey, the worst of which could lead to execution of arbitrary code.

A vulnerability has been discovered in Atop, which can possibly lead to arbitrary code execution.

A vulnerability has been discovered in Tracker miners, which can lead to a sandbox escape and execution of arbitrary code.

Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.

Multiple vulnerabilities have been discovered in NVIDIA Drivers, the worst of which could result in arbitrary code execution.

A vulnerability has been discovered in Orc, which can lead to arbitrary code execution

A vulnerability has been discovered in glibc, which can lead to execution of arbitrary code..

Multiple vulnerabilities have been discovered in PAM, the worst of which could lead to password leakage.

A vulnerability has been discovered in XZ Utils, which could lead to denial of service.

Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.

A vulnerability has been discovered in Yubico pam-u2f, which can lead to a partial authentication bypass.

A vulnerability has been discovered in libuv, where hostname truncation can lead to attacker-controlled lookups.

Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in libgsf, the worst of which can lead to arbitrary code execution.

A vulnerability has been discovered in Qt, where a buffer overflow can lead to denial of service.

Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in PHP, the worst of which could lead to arbitrary code execution.