CVE-2017-20148

CVE-2017-20148 affects Gentoo Logcheck prior to patching: the ebuild logcheck-1.3.23.ebuild allows root privilege escalation from the logcheck user due to insecure recursive chown calls in pkg_postinst. The vulnerability arises in the Logcheck component installed on Gentoo systems, enabling a loc...