Gentoo Security Advisory GLSA 201507-16

Gentoo Linux Local Security Checks GLSA 201507-16 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2013-2100

The CVE-2013-2100 issue affects Gentoo Portage (version 2.1.12) where the urlopen helper does not verify X.509 SSL certificates when using HTTPS. This allows a remote attacker to perform a man-in-the-middle attack to spoof the Gentoo repository and modify binary package lists via a crafted certif...