[ GLSA 200411-13 ] Portage, Gentoolkit: Temporary file vulnerabilities

Gentoo Linux Security Advisory GLSA 200411-13:01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

GLSA-200411-13 : Portage, Gentoolkit: Temporary file vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200411-13 Portage, Gentoolkit: Temporary file vulnerabilities dispatch-conf and qpkg use predictable filenames for temporary files. Impact : A local attacker could create symbolic links in the temporary files directory, pointing t...

Portage, Gentoolkit: Temporary file vulnerabilities

Background Portage is Gentoo's package management tool. The dispatch-conf utility allows for easy rollback of configuration file changes and automatic updates of configurations files never modified by users. Gentoolkit is a collection of Gentoo specific administration scripts, one of which is the...

GLSA-200404-01 : Insecure sandbox temporary lockfile vulnerabilities in Portage

The remote host is affected by the vulnerability described in GLSA-200404-01 Insecure sandbox temporary lockfile vulnerabilities in Portage A flaw in Portage's sandbox wrapper has been found where the temporary lockfiles are subject to a hard-link attack which allows linkable files to be...

Insecure sandbox temporary lockfile vulnerabilities in Portage

Background Portage is Gentoo's package management system which is responsible for installing, compiling and updating any ebuilds on the system through the Gentoo rsync tree. Under default configurations, most ebuilds run under a sandbox which prevent the build process writing to the "real" system...