A filtering bypass in less may allow denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/less | * | < 608-r2 | >= 608-r2 |
less is a pager and text file viewer.
less suffered from a flaw in its terminal escape sequence handling which made its filtering incomplete.
Malicious input could clear the terminal output or otherwise manipulate it with faked interactions.
There is no known workaround at this time.
All less users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/less-608-r2"