{"action":"Upgrade portage to 2.1.12.2 or later.","affected":[{"fixed":"2.1.12.2","introduced":"0"}],"component":"portage","cve_ids":["CVE-2013-2100"],"ecosystem":"PyPI","epss":0.0157,"exploited":false,"fixed_versions":["2.1.12.2"],"ghsa_id":"GHSA-8823-xphr-qw9v","id":"tcs_01M5KF7M1QBFDZ0VH5FXG36FFC","modified_at":"2024-11-22T20:42:33.334895Z","published_at":"2022-05-17T01:36:20Z","references":["https://osv.dev/vulnerability/GHSA-8823-xphr-qw9v","https://nvd.nist.gov/vuln/detail/CVE-2013-2100","https://bugs.gentoo.org/show_bug.cgi?id=469888","https://exchange.xforce.ibmcloud.com/vulnerabilities/84315","https://github.com/gentoo/portage","https://github.com/pypa/advisory-database/tree/main/vulns/portage/PYSEC-2014-115.yaml","https://security.gentoo.org/glsa/201507-16","http://openwall.com/lists/oss-security/2013/05/15/5","http://openwall.com/lists/oss-security/2013/05/16/3"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-8823-xphr-qw9v","url":"https://osv.dev/vulnerability/GHSA-8823-xphr-qw9v"}],"summary":"Gentoo Portage does not verify X.509 certificates from SSL servers"}