portage-ng / portage / dev-util / rizin / 0.8.2
portage-ng glsa
1 advisory reference dev-util/rizin · none place version 0.8.2 in a vulnerable range
▸ GLSA 202209-06 Rizin: Multiple Vulnerabilities this version unaffected normal local and remote 2022-09-25

Multiple vulnerabilities have been discovered in Rizin, the worst of which could lead to arbitrary code execution.

Announced
2022-09-25
Revised
2022-09-25
Access
local and remote
Bugs
#861524 #868999
Advisory
https://security.gentoo.org/glsa/202209-06

Affected packages

PackageArchVulnerableUnaffected
dev-util/rizin*< 0.4.1>= 0.4.1

Background

Rizin is a reverse engineering framework for binary analysis.

Description

Multiple vulnerabilities have been discovered in Rizin. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Rizin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-util/rizin-0.4.1"

References