Anton Bolshakov

CSAF support

1

Hi, any chance to support that? https://oasis-open.github.io/csaf-documentation/ it is a JSON based standard https://github.com/oasis-tcs/csaf/blob/master/csaf_2.0/json_schema/csaf_json_schema.json

https://security.paloaltonetworks.com/CVE-2022-0778 [PeterMosmans/openssl#56](https://github.com/PeterMosmans/openssl/pull/56)

sudo: wheel NOPASSWD false positive

1

Hello, I have sudo with permissive line: ```%wheel ALL=(ALL) NOPASSWD: ALL``` traitor reports false positive on all vulnerable test cases, and even pops a shell. But it can't exploit anything...

multiple vulnerabilities (CVE-2020-{36404,36405})

1

Heap-use-after-free in llvm_ks::X86Operand::getToken https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22850 Invalid-free in llvm_ks::SmallVectorImpl::~SmallVectorImpl https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22371 See https://bugs.gentoo.org/799785 could you clarify if these security issues were addressed?

pydispatcher: find a better supported alternative

1

Hi, I'm a Pentoo developers and facing an issue. pydispatcher is a badly outdated (2015) and not supported package. I have to keep it in the tree just for scrapy...

similarly with: https://github.com/aboul3la/Sublist3r/issues/215 Thanks

Please see more details at the following link: https://github.com/pentoo/pentoo-overlay/issues/596

Security problem with relative DT_RUNPATH

1

"." should not be in the path ``` scanelf: rpath_security_checks(): Security problem with relative DT_RUNPATH '.' in /var/tmp/portage/dev-util/redasm-2.1.1/image/usr/bin/redasm scanelf: rpath_security_checks(): Security problem with relative DT_RUNPATH '.' in /var/tmp/portage/dev-util/redasm-2.1.1/image/usr/lib64/LibREDasm.so strip: x86_64-pc-linux-gnu-strip...

share library support

3

Hi, I'm trying to package this tool for Pentoo Linux and have suggestions. You have released REDasm v 2.1.1 recently, however the tar-ball is not really useful. The current build...

This is a common problem that many tools which we want to distribute do not support system wide installation. Some of these tools provide their own "install.sh" or "setup.sh" with...