Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/portage@3.0.20
purl pkg:pypi/portage@3.0.20
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
PYSEC-2024-10
Aliases:
CVE-2016-20021
GHSA-pw5x-x5jw-ccmh
In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file …
3.0.47
Vulnerable
PYSEC-2014-115
Aliases:
CVE-2013-2100
GHSA-8823-xphr-qw9v
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, … There are no reported fixed by versions.
This package is not known to fix any advisories.