Portage and NTFS-3G updates for Gentoo Linux

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux issued two high-severity security advisories, to patch multiple flaws in the Portage package manager and the NTFS-3G filesystem driver. The Portage update resolves bugs that allow malicious ebuilds to bypass sandbox restrictions and write files outside their designated work directories. NTFS-3G requires an immediate update to address ten separate vulnerabilities, with the most severe flaws potentially granting attackers elevated system privileges. Administrators should sync their system trees and install Portage 3.0.81.2 and NTFS-3G 2026.7.7 to close these security gaps.

[ GLSA 202608-12 ] Portage: Multiple Vulnerabilities
[ GLSA 202608-13 ] NTFS-3G: Multiple Vulnerabilities

Haveged and HTTP-Daemon updates for Gentoo Linux

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux issued two security advisories this month to address distinct software vulnerabilities. GLSA 202608-11 fixes a high-severity privilege escalation flaw in haveged that could allow local attackers to gain root access. GLSA 202608-10 corrects a header handling inconsistency in HTTP-Daemon that risks API abuse or cache poisoning. Users need to upgrade haveged to version 1.9.21 and HTTP-Daemon to version 6.160.0 to resolve both issues.

[ GLSA 202608-11 ] haveged: Privilege escalation
[ GLSA 202608-10 ] HTTP-Daemon: Improper header handling

Bubblewrap, Apache HTTPD, Exim, Flatpak, Dnsmasq, libinput, and rsync updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux released seven high-severity security advisories in mid-August 2026 targeting widely used system utilities and network services. The vulnerabilities span critical attack vectors, including root privilege escalation in Bubblewrap and rsync, remote code execution in Dnsmasq and Exim, sandbox escape in Flatpak, and input device handling flaws in libinput. Apache HTTPD received the largest single patch addressing 41 tracked issues ranging from denial of service to remote code execution.

[ GLSA 202608-09 ] Bubblewrap: Root privilege escalation
[ GLSA 202608-08 ] libinput: Multiple Vulnerabilities
[ GLSA 202608-06 ] Flatpak: Multiple Vulnerabilities
[ GLSA 202608-07 ] Exim: Multiple Vulnerabilities
[ GLSA 202608-05 ] Apache HTTPD: Multiple Vulnerabilities
[ GLSA 202608-04 ] Dnsmasq: Multiple Vulnerabilities
[ GLSA 202608-03 ] rsync: Multiple Vulnerabilities

FreeType update for Gentoo Linux

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux released security advisory GLSA 202608-02 to patch multiple vulnerabilities in media-libs/freetype for versions below 2.14.3. The flaws encompass an out-of-bounds read and information disclosure risk across nine CVE identifiers, with no known workaround available. Administrators must update the font engine to version 2.14.3 or later to resolve the issues. Install the fix by running emerge --sync and then emerge --ask --oneshot --verbose ">=media-libs/freetype-2.14.3".

[ GLSA 202608-02 ] FreeType: Multiple Vulnerabilities

DTrace and Fuse updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux released two security advisories addressing critical flaws in DTrace and FUSE that could allow attackers to execute arbitrary code. The first advisory highlights a vulnerability in the dtprobed component where specially crafted USDT provider names can trigger unauthorized file creation, potentially paving the way for malicious code execution. Meanwhile, a separate issue within FUSE involves both a null pointer dereference and a use-after-free bug that may crash the system or be exploited for remote code execution. Administrators running affected versions should immediately sync their package repositories and upgrade DTrace to at least version 2.0.6 while updating FUSE to version 3.18.1 or higher.

[ GLSA 202604-04 ] DTrace: Arbitrary file creation via dtprobed
[ GLSA 202604-03 ] FUSE: Multiple Vulnerabilities

Commons-BeanUtils, Asterisk, GIMP, Vim, Inetutils updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux has released several security updates to address various vulnerabilities. The updates include patches for Commons-BeanUtils, which can lead to arbitrary code execution, and Asterisk, which is vulnerable to multiple issues. Additionally, GIMP and Vim are also affected by arbitrary code execution and multiple vulnerabilities, respectively. The inetutils package is another priority update due to a remote code execution vulnerability.

[ GLSA 202601-05 ] Commons-BeanUtils: Arbitary Code Execution
[ GLSA 202601-04 ] Asterisk: Multiple Vulnerabilities
[ GLSA 202601-03 ] GIMP: Arbitrary Code Execution
[ GLSA 202601-02 ] Vim, gVim: Multiple Vulnerabilities
[ GLSA 202601-01 ] inetutils: Remote Code Execution

Librnp update for Gentoo Linux

Gentoo 2535 Published by Philipp Esselbach 0

A security advisory has been issued for Gentoo Linux, warning users about a vulnerability in the librnp package due to weak random number generation that can be easily cracked. The affected version of librnp, 0.18.0, generates weak session keys for public key encryption, potentially allowing attackers with just the public key to read encrypted messages. Users are advised to upgrade to the latest version of librnp (0.18.1 or higher) as soon as possible and be aware that sensitive information sent using affected software may have been compromised.

[ GLSA 202511-07 ] librnp: Weak random number generation

UDisks, WebKitGTK+, qtsvg, Chromium, and Redis updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux has released security updates to address multiple vulnerabilities in various packages. The affected packages include UDisks, WebKitGTK+, qtsvg, Chromium, and Redis.

[ GLSA 202511-01 ] UDisks: Multiple Vulnerabilities
[ GLSA 202511-02 ] WebKitGTK+: Multiple Vulnerabilities
[ GLSA 202511-03 ] qtsvg: Multiple Vulnerabilities
[ GLSA 202511-04 ] Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities
[ GLSA 202511-05 ] redict, redis: Multiple Vulnerabilities

Composer, FontForge, PAM, and more updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux has been updated with several security vulnerabilities, including Composer, Spreadsheet-ParseExcel, Mozilla Network Security Service, FontForge, GPL Ghostscript, and PAM:

[ GLSA 202508-06 ] Composer: Multiple Vulnerabilities
[ GLSA 202508-05 ] Spreadsheet-ParseExcel: Arbitrary Code Execution
[ GLSA 202508-04 ] Mozilla Network Security Service (NSS): TLS RSA decryption timing attack
[ GLSA 202508-03 ] FontForge: Arbitrary Code Execution
[ GLSA 202508-02 ] GPL Ghostscript: Multiple Vulnerabilities
[ GLSA 202508-01 ] PAM: Multiple Vulnerabilities

ClamAV, strongSwan, NTP, Git, Chromium, REXML updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux has received multiple security updates addressing vulnerabilities in ClamAV, strongSwan, NTP, Git, Chromium, and REXML:

[ GLSA 202507-03 ] ClamAV: Multiple Vulnerabilities
[ GLSA 202507-04 ] strongSwan: Buffer Overflow
[ GLSA 202507-05 ] NTP: Multiple Vulnerabilities
[ GLSA 202507-09 ] Git: Multiple Vulnerabilities
[ GLSA 202507-07 ] Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities
[ GLSA 202507-08 ] REXML: Multiple Vulnerabilities

YAML-LibYAML, File-Find-Rule, OpenImageIO, and more updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

The latest security updates for Gentoo Linux include YAML-LibYAML, File-Find-Rule, OpenImageIO, Node.js, Python, PyPy, Qt, GTK+ 3, X.Org X server, XWayland, LibreOffice, GStreamer, GStreamer Plugins, and Emacs, addressing various vulnerabilities:

[ GLSA 202506-11 ] YAML-LibYAML: Shell injection
[ GLSA 202506-10 ] File-Find-Rule: Shell Injection
[ GLSA 202506-09 ] OpenImageIO: Multiple Vulnerabilities
[ GLSA 202506-08 ] Node.js: Multiple Vulnerabilities
[ GLSA 202506-07 ] Python, PyPy: Multiple Vulnerabilities
[ GLSA 202506-06 ] Qt: Multiple Vulnerabilities
[ GLSA 202506-05 ] GTK+ 3: Search path vulnerability
[ GLSA 202506-04 ] X.Org X server, XWayland: Multiple Vulnerabilities
[ GLSA 202506-03 ] LibreOffice: Multiple Vulnerabilities
[ GLSA 202506-02 ] GStreamer, GStreamer Plugins: Multiple Vulnerabilities
[ GLSA 202506-01 ] Emacs: Multiple Vulnerabilities

Spidermonkey, FreeType, Atop, Node.js, and Tracker Miners updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux has been updated with several security vulnerabilities, including Spidermonkey, FreeType, Atop, Node.js, and Tracker miners:

[ GLSA 202505-08 ] Spidermonkey: Multiple Vulnerabilities
[ GLSA 202505-07 ] FreeType: Remote Code Execution
[ GLSA 202505-09 ] Atop: Heap Corruption
[ GLSA 202505-11 ] Node.js: Multiple Vulnerabilities
[ GLSA 202505-10 ] Tracker miners: Sandbox weakness

PAM, Firefox, Thunderbird, Orc, NVIDIA Drivers, Glibc updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux has received an update addressing various security vulnerabilities, including multiple issues found in PAM, Mozilla Firefox, Mozilla Thunderbird, Orc, NVIDIA Drivers, and glibc:

[ GLSA 202505-01 ] PAM: Multiple Vulnerabilities
[ GLSA 202505-02 ] Mozilla Firefox: Multiple Vulnerabilities
[ GLSA 202505-03 ] Mozilla Thunderbird: Multiple Vulnerabilities
[ GLSA 202505-05 ] Orc: Arbitrary Code Execution
[ GLSA 202505-04 ] NVIDIA Drivers: Multiple Vulnerabilities
[ GLSA 202505-06 ] glibc: Buffer Overflow

Firefox, QT, Ghostscript, and more updates for Gentoo

Gentoo 2535 Published by Philipp Esselbach 0

Gentoo Linux has received multiple updates addressing several security vulnerabilities, which include issues in Mozilla Firefox, QtWebEngine, Qt: Buffer Overflow, libgsf, GPL Ghostscript, libuv, and Yubico pam-u2f:

[ GLSA 202501-10 ] Mozilla Firefox: Multiple Vulnerabilities
[ GLSA 202501-09 ] QtWebEngine: Multiple Vulnerabilities
[ GLSA 202501-08 ] Qt: Buffer Overflow
[ GLSA 202501-07 ] libgsf: Multiple Vulnerabilities
[ GLSA 202501-06 ] GPL Ghostscript: Multiple Vulnerabilities
[ GLSA 202501-05 ] libuv: Hostname Truncation
[ GLSA 202501-04 ] Yubico pam-u2f: Partial Authentication Bypass

Next Page

Windows

Linux

macOS

Community

  • gavindi
    Mt. Sync is a native GNOME desktop application that puts ...
  • Lexonight
    Hey everyone,Wanted to share a project I've been b ...
  • SeveG
    need some help here... situationPC= Packard BellOS= win1 ...