CouchDB: Multiple vulnerabilities Multiple vulnerabilities have been found in CouchDB, the worst of which could lead to the remote execution of code. couchdb 2018-12-15 2018-12-15 630796 660908 663164 remote 2.1.2

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database.

Multiple vulnerabilities have been discovered in CouchDB. Please review the CVE identifiers referenced below for details.

A remote attacker could execute arbitrary code or escalate privileges.

There is no known workaround at this time.

Gentoo has discontinued support for CouchDB and recommends that users unmerge the package:

# emerge --unmerge "dev-db/couchdb"
CVE-2018-11769 CVE-2018-8007 b-man b-man