Gentoo Linux security advisories This feed contains new Gentoo Linux security advisories. Contact security@gentoo.org with questions.
- GLSA 202609-02: Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilitieson September 12, 2026 at 12:00 am
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi.
- GLSA 202609-03: Ruby: Remote code executionon September 12, 2026 at 12:00 am
A vulnerability has been discovered in Ruby, possibly allowing remote code execution.
- GLSA 202609-01: Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilitieson September 1, 2026 at 12:00 am
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi.
- GLSA 202608-34: Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilitieson August 31, 2026 at 12:00 am
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, and Opera.
- GLSA 202608-32: Tor: Multiple Vulnerabilitieson August 29, 2026 at 12:00 am
Multiple vulnerabilities have been found in Tor, the worst of which could allow remote code execution.
- GLSA 202608-33: Freenet: Deanonymization Vulnerabilityon August 29, 2026 at 12:00 am
A vulnerability has been discovered in Freenet, where an XSS vulnerability could lead to deanonymization.
- GLSA 202608-26: Vinyl Cache: Multiple Vulnerabilitieson August 27, 2026 at 12:00 am
Multiple vulnerabilities have been found in Vinyl Cache, allowing request smuggling and denial of service.
- GLSA 202608-28: Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilitieson August 27, 2026 at 12:00 am
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge. Opera.
- GLSA 202608-29: Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilitieson August 27, 2026 at 12:00 am
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, and Opera.
- GLSA 202608-30: OpenRGB: Multiple Vulnerabilitieson August 27, 2026 at 12:00 am
Multiple vulnerabilities have been found in OpenRGB, allowing root remote command execution.
- GLSA 202608-31: Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilitieson August 27, 2026 at 12:00 am
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi.
- GLSA 202608-25: UnrealIRCd: Denial of serviceon August 26, 2026 at 12:00 am
A vulnerability has been discovered in UnrealIRCd, possibly allowing denial of service.
- GLSA 202608-27: GNU screen: Multiple Vulnerabilitieson August 26, 2026 at 12:00 am
Multiple vulnerabilities have been found in GNU screen.
- GLSA 202608-24: DTrace: Multiple Vulnerabilitieson August 26, 2026 at 12:00 am
Multiple vulnerabilities have been found in DTrace, the worst of which could allow denial of service.
- GLSA 202608-21: GNU Emacs: Arbitrary code executionon August 26, 2026 at 12:00 am
A vulnerability has been discovered in GNU Emacs allowing arbitrary code execution.
- GLSA 202608-23: Incus: Multiple Vulnerabilitieson August 25, 2026 at 12:00 am
Multiple vulnerabilities have been found in incus, the worst of which could result in privilege escalation.
- GLSA 202608-22: needrestart: Multiple vulnerabilitieson August 24, 2026 at 12:00 am
Multiple vulnerabilities have been discovered in needrestart, the worst of which allowing root privilege escalation.
- GLSA 202608-17: libssh2: Multiple Vulnerabilitieson August 20, 2026 at 12:00 am
Multiple vulnerabilities have been found in libssh2, the worst of which could result in remote code execution.
- GLSA 202608-18: GNU Emacs: Arbitrary code executionon August 20, 2026 at 12:00 am
A vulnerability has been discovered in GNU Emacs which could lead to arbitrary code execution.
- GLSA 202608-19: quickjs-ng: Multiple Vulnerabilitieson August 20, 2026 at 12:00 am
Multiple vulnerabilities have been found in quickjs-ng, the worst of which could result in arbitrary code execution.
- GLSA 202608-20: acl, attr: Multiple vulnerabilitieson August 20, 2026 at 12:00 am
Multiple vulnerabilities have been found in acl and attr, the worst of which could lead to local privilege escalation.
- GLSA 202608-14: X.Org X server, XWayland: Multiple Vulnerabilitieson August 17, 2026 at 12:00 am
Multiple vulnerabilities have been found in X.Org X server, XWayland.
- GLSA 202608-15: PostgreSQL: Multiple Vulnerabilitieson August 17, 2026 at 12:00 am
Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in arbitrary code execution.
- GLSA 202608-16: nginx: Multiple Vulnerabilitieson August 17, 2026 at 12:00 am
Multiple vulnerabilities have been found in nginx, the worst of which could result in arbitrary code execution.
- GLSA 202608-13: NTFS-3G: Multiple Vulnerabilitieson August 16, 2026 at 12:00 am
Multiple vulnerabilities have been found in NTFS-3G, the worst of which could result in privilege escalation.
- GLSA 202608-11: haveged: Privilege escalationon August 15, 2026 at 12:00 am
A vulnerability has been discovered in haveged which could allow local privilege escalation
- GLSA 202608-12: Portage: Multiple Vulnerabilitieson August 15, 2026 at 12:00 am
Multiple vulnerabilities have been found in Portage.
- GLSA 202608-06: Flatpak: Multiple Vulnerabilitieson August 14, 2026 at 12:00 am
Multiple vulnerabilities have been found in Flatpak, the worst of which allows sandbox escape.
- GLSA 202608-07: Exim: Multiple Vulnerabilitieson August 14, 2026 at 12:00 am
Multiple vulnerabilities have been found in Exim, the worst of which allows arbitrary code execution.
- GLSA 202608-08: libinput: Multiple Vulnerabilitieson August 14, 2026 at 12:00 am
Multiple vulnerabilities have been found in libinput, the worst of which could result in privilege escalation.
- GLSA 202608-09: Bubblewrap: Root privilege escalationon August 14, 2026 at 12:00 am
A vulnerability has been discovered in Bubblewrap that would allow root privilege escalation.
- GLSA 202608-10: HTTP-Daemon: Improper header handlingon August 14, 2026 at 12:00 am
A vulnerability was found in HTTP-Daemon allowing header manipulation or filter bypass.
- GLSA 202608-03: rsync: Multiple Vulnerabilitieson August 13, 2026 at 12:00 am
Multiple vulnerabilities have been found in rsync, the worst of which could result in privilege escalation.
- GLSA 202608-04: Dnsmasq: Multiple Vulnerabilitieson August 13, 2026 at 12:00 am
Multiple vulnerabilities have been found in Dnsmasq, one of which includes remote code execution.
- GLSA 202608-05: Apache HTTPD: Multiple Vulnerabilitieson August 13, 2026 at 12:00 am
Multiple vulnerabilities have been found in Apache HTTPD, the worst of which could result in remote code execution.
- GLSA 202608-02: FreeType: Multiple Vulnerabilitieson August 12, 2026 at 12:00 am
Multiple vulnerabilities have been found in FreeType, one of which includes information leak.
- GLSA 202604-03: FUSE: Multiple Vulnerabilitieson April 17, 2026 at 12:00 am
Multiple vulnerabilities have been found in FUSE, the worst of which can lead to code execution.
- GLSA 202604-04: DTrace: Arbitrary file creation via dtprobedon April 17, 2026 at 12:00 am
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.
- GLSA 202603-01: Exiv2: Multiple Vulnerabilitieson March 9, 2026 at 12:00 am
Multiple vulnerabilities have been found in Exiv2, the worst of which can lead to a crash via Denial of Service.
- GLSA 202601-01: inetutils: Remote Code Executionon January 26, 2026 at 12:00 am
A vulnerability has been discovered in the telnetd module of inetutils, which allows remote code execution as root.
- GLSA 202601-02: Vim, gVim: Multiple Vulnerabilitieson January 26, 2026 at 12:00 am
Multiple vulnerabilities have been discovered in Vim and gVim, the worst of which could lead to execution of arbitrary code.
- GLSA 202601-03: GIMP: Arbitrary Code Executionon January 26, 2026 at 12:00 am
A vulnerability has been discovered in GIMP, which can lead to execution of arbitrary code.
- GLSA 202601-04: Asterisk: Multiple Vulnerabilitieson January 26, 2026 at 12:00 am
Multiple vulnerabilities have been discovered in Asterisk, the worst of which can lead to arbitrary code execution.
- GLSA 202601-05: Commons-BeanUtils: Arbitary Code Executionon January 26, 2026 at 12:00 am
A vulnerability has been discovered in Commons-BeanUtils, which can lead to execution of arbitrary code.
- GLSA 202512-01: GnuPG: Arbitrary Code Executionon December 27, 2025 at 12:00 am
A vulnerability has been discovered in GnuPG, which can lead to arbitrary code execution.
- GLSA 202511-06: libpng: Multiple vulnerabilitieson November 26, 2025 at 12:00 am
Multiple vulnerabilities have been discovered in libpng, the worst of which could lead to execution of arbitrary code.
- GLSA 202511-07: librnp: Weak random number generationon November 26, 2025 at 12:00 am
librnp uses weak random number generation such that generated keys can be easily cracked.
- GLSA 202511-03: qtsvg: Multiple Vulnerabilitieson November 24, 2025 at 12:00 am
Multiple vulnerabilities have been discovered in qtsvg, the worst of which could lead to execution of arbitrary code.
- GLSA 202511-04: Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilitieson November 24, 2025 at 12:00 am
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
- GLSA 202511-05: redict, redis: Multiple Vulnerabilitieson November 24, 2025 at 12:00 am
Multiple vulnerabilities have been discovered in redis and redict, the worst of which could lead to execution of arbitrary code.




