Gentoo Linux Security Advisory 201705-1 - Multiple vulnerabilities have been found in libevent, the worst of which allows remote attackers to execute arbitrary code. Versions less than 2.1.7_rc are affected.
20197c4e233e12df94ada2e96a2a38eb30ea6ea8dde6339a3d3af646cb69ae13
A vulnerability exists due to insecure storage of account credentials used by OS Installation Management during operating system installation. A local attacker can potentially access a sensitive file containing account credentials and decrypt a password. Depending on the privileges associated with the credentials, an attacker can potentially gain further access. This vulnerability only affects operating system installations created by CA Client Automation with OS Installation Management. Versions affected include CA Client Automation r14.0, r14.0 SP1 and CA Client Automation r12.9.
379b013c4b3c51375804f709509f608366ef08dc24ca477e7fb8e4d863cfd0cd