hesiod: Root privilege escalation

Background

DNS functionality to access to DB of information that changes infrequently.

Description

Multiple vulnerabilities have been discovered in hesiod that have remained unaddressed. Please review the referenced CVE identifiers for details.

Impact

A remote or local attacker may be able to escalate privileges to root.

Workaround

There is no known workaround at this time.

Resolution

Gentoo has discontinued support for hesiod and recommends that users unmerge the package:

 # emerge --unmerge "net-dns/hesiod"