portage-ng / portage / app-misc / beep / 1.4.12-r2
portage-ng glsa
1 advisory reference app-misc/beep · none place version 1.4.12-r2 in a vulnerable range
▸ GLSA 201805-15 beep: Local privilege escalation this version unaffected normal remote 2018-05-30

A vulnerability in beep could allow local attackers to escalate privileges.

Announced
2018-05-30
Revised
2018-05-30
Access
remote
Bugs
#652330
Advisory
https://security.gentoo.org/glsa/201805-15

Affected packages

PackageArchVulnerableUnaffected
app-misc/beep*< 1.3-r3>= 1.3-r3

Background

The advanced PC speaker beeper.

Description

A race condition, if setuid, was discovered in beep.

Impact

A local attacker could escalate privileges.

Workaround

There is no known workaround at this time.

Resolution

All beep users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-misc/beep-1.3-r3"

References