app-admin

Security Bug Reports

• app-admin/puppet, app-admin/puppet-agent: Multiple vulnerabilities

  824626 - Assigned to Gentoo Security
• <app-admin/keepass-2.56: logs plaintext password

  835074 - Assigned to Gentoo Security
• <app-admin/logrotate-3.20.0: Unprivileged DoS via state file

  847382 - Assigned to Gentoo Security
• <app-admin/vault-{1.10.4,1.11.1}: incorrect access control

  861812 - Assigned to Gentoo Security
• <app-admin/vault-{1.10.7,1.11.4}: insufficient certificate revocation list checking

  876909 - Assigned to Gentoo Security
• <app-admin/ansible-8.3.0: ec2_instance tower_callback credential leakage into logs

  878761 - Assigned to Gentoo Security
• app-admin/doas: vulnerable to privilege escalation via TIOCSTI/TIOCLINUX command injection

  901393 - Assigned to Gentoo Security
• <app-admin/vault-{1.11.9,1.12.5}: multiple vulnerabilities

  903806 - Assigned to Gentoo Security
• <app-admin/filebeat-7.17.16: credential leakage into logs

  905879 - Assigned to Gentoo Security
• <app-admin/sysstat-12.6.2-r1: incomplete fix for CVE-2022-39377

  907121 - Assigned to Gentoo Security
• <app-admin/consul-1.15.3: multiple vulnerabilities

  907925 - Assigned to Gentoo Security
• <app-admin/keepass-2.56: password disclosure via memory dump

  908040 - Assigned to Gentoo Security
• <app-admin/consul-1.15.7: multiple vulnerabilities

  917614 - Assigned to Gentoo Security
• <app-admin/vault-1.14.5: multiple vulnerabilities

  918420 - Assigned to Gentoo Security
• app-admin/graylog: multiple vulnerabilities

  918542 - Assigned to Gentoo Security
• <app-admin/ansible-core-{2.14.12,2.15.8,2.16.2}: template injection

  919881 - Assigned to Gentoo Security
• <app-admin/vault-1.14.8: denial of service via large HTTP requests

  920177 - Assigned to Gentoo Security
• <app-admin/needrestart-3.8: Local privilege escalation

  944015 - Assigned to Gentoo Security