Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 955900 (CVE-2025-0781)

Summary: games-simulation/flightgear: Sandbox bypass in Nasal scripts
Product: Gentoo Security Reporter: Sam James <sam>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: IN_PROGRESS ---    
Severity: normal CC: games, reavertm
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: B3 [ebuild]
Package list:
Runtime testing required: ---
Bug Depends on: 951572    
Bug Blocks:    

Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-05-13 03:13:21 UTC 
From https://www.flightgear.org/download/releases/2024-1/
"""
Fixed a large number of crashes, bugs, and memory leaks, as well as a high-severity security vulnerability (CVE-2025-0781).
"""
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-05-13 03:13:46 UTC 
"An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level."