A TOCTOU race has been discovered in Shadow, which could result in the unauthorized modification of files.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/shadow | * | < 4.12.2 | >= 4.12.2 |
Shadow contains utilities to deal with user accounts
A TOCTOU race condition was discovered in shadow. A local attacker with write privileges in a directory removed or copied by usermod/userdel could potentially exploit this flaw when the administrator invokes usermod/userdel.
An unauthorized user could potentially modify files which they do not have write permissions for.
There is no known workaround at this time.
All Shadow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.12.2"
Multiple Shadow utilities were installed with setuid permissions, allowing possible root privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/shadow | * | < 4.8-r3 | >= 4.8-r3 |
Shadow is a set of tools to deal with user accounts.
When Shadow was installed with the PAM use flag, setuid binaries provided by Shadow were not properly restricted.
A local attacker could escalate privileges to root.
There is no known workaround at this time.
All Shadow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.8-r3"
A vulnerability found in Shadow may allow local attackers to bypass security restrictions.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/shadow | * | < 4.6 | >= 4.6 |
Shadow is a set of tools to deal with user accounts.
A local attacker could possibly bypass security restrictions if an administrator used “group blacklisting” to restrict access to file system paths.
A local attacker could possibly bypass security restrictions.
There is no known workaround at this time.
All shadow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.6"
A vulnerability found in Shadow may allow remote attackers to cause a Denial of Service condition or produce other unspecified behaviors.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/shadow | * | < 4.5 | >= 4.5 |
Shadow is a set of tools to deal with user accounts.
Malformed input in the newusers tool may produce crashes and other unspecified behaviors.
A remote attacker could possibly cause a Denial of Service condition or bypass privilege boundaries in some web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts.
There is no known workaround at this time.
All Shadow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.5"
Multiple vulnerabilities have been found in Shadow, the worst of which might allow privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/shadow | * | < 4.4-r2 | >= 4.4-r2 |
Shadow is a set of tools to deal with user accounts.
Multiple vulnerabilities have been discovered in Shadow. Please review the CVE identifiers referenced below for details.
A local attacker could possibly cause a Denial of Service condition, gain privileges via crafted input, or SIGKILL arbitrary processes.
There is no known workaround at this time.
All Shadow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.4-r2"
This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2012. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution. Please see the package list and CVE identifiers below for more information.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/syslog-ng | * | < 3.2.4 | >= 3.2.4 |
| app-misc/ca-certificates | * | < 20110502-r1 | >= 20110502-r1 |
| app-office/gnucash | * | < 2.4.4 | >= 2.4.4 |
| dev-db/unixODBC | * | < 2.3.0-r1 | >= 2.3.0-r1 |
| dev-libs/xmlsec | * | < 1.2.17 | >= 1.2.17 |
| dev-php/PEAR-Mail | * | < 1.2.0 | >= 1.2.0 |
| dev-php/PEAR-PEAR | * | < 1.9.2-r1 | >= 1.9.2-r1 |
| dev-util/oprofile | * | < 0.9.6-r1 | >= 0.9.6-r1 |
| dev-util/qt-creator | * | < 2.1.0 | >= 2.1.0 |
| dev-vcs/gitolite | * | < 1.5.9.1 | >= 1.5.9.1 |
| games-sports/racer-bin | * | >= 0.5.0-r1 | — |
| gnome-base/gdm | * | < 3.8.4-r3 | >= 3.8.4-r3 |
| media-libs/fmod | * | < 4.38.00 | >= 4.38.00 |
| media-libs/xine-lib | * | < 1.1.19 | >= 1.1.19 |
| media-sound/lastfmplayer | * | < 1.5.4.26862-r3 | >= 1.5.4.26862-r3 |
| net-analyzer/sflowtool | * | < 3.20 | >= 3.20 |
| net-libs/libsoup | * | < 2.34.3 | >= 2.34.3 |
| net-libs/webkit-gtk | * | < 1.2.7 | >= 1.2.7 |
| net-misc/mrouted | * | < 3.9.5 | >= 3.9.5 |
| net-misc/rsync | * | < 3.0.8 | >= 3.0.8 |
| net-misc/vino | * | < 2.32.2 | >= 2.32.2 |
| sys-apps/shadow | * | < 4.1.4.3 | >= 4.1.4.3 |
| sys-cluster/resource-agents | * | < 1.0.4-r1 | >= 1.0.4-r1 |
| sys-fs/lvm2 | * | < 2.02.72 | >= 2.02.72 |
| x11-apps/xrdb | * | < 1.0.9 | >= 1.0.9 |
For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild.
Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details.
A context-dependent attacker may be able to gain escalated privileges, execute arbitrary code, cause Denial of Service, obtain sensitive information, or otherwise bypass security restrictions.
There are no known workarounds at this time.
All FMOD Studio users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/fmod-4.38.00"
All PEAR Mail users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-php/PEAR-Mail-1.2.0"
All LVM2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-fs/lvm2-2.02.72"
All GnuCash users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-office/gnucash-2.4.4"
All xine-lib users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/xine-lib-1.1.19"
All Last.fm Scrobbler users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/lastfmplayer-1.5.4.26862-r3"
All WebKitGTK+ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/webkit-gtk-1.2.7"
All shadow tool suite users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.1.4.3"
All PEAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-php/PEAR-PEAR-1.9.2-r1"
All unixODBC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/unixODBC-2.3.0-r1"
All Resource Agents users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-cluster/resource-agents-1.0.4-r1"
All mrouted users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/mrouted-3.9.5"
All rsync users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/rsync-3.0.8"
All XML Security Library users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/xmlsec-1.2.17"
All xrdb users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-apps/xrdb-1.0.9"
All Vino users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/vino-2.32.2"
All OProfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-util/oprofile-0.9.6-r1"
All syslog-ng users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/syslog-ng-3.2.4"
All sFlow Toolkit users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/sflowtool-3.20"
All GNOME Display Manager users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=gnome-base/gdm-3.8.4-r3"
All libsoup users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libsoup-2.34.3"
All CA Certificates users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-misc/ca-certificates-20110502-r1"
All Gitolite users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-vcs/gitolite-1.5.9.1"
All QtCreator users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-util/qt-creator-2.1.0"
Gentoo has discontinued support for Racer. We recommend that users unmerge Racer:
# emerge --unmerge "games-sports/racer-bin"
NOTE: This is a legacy GLSA. Updates for all affected architectures have been available since 2012. It is likely that your system is already no longer affected by these issues.
An insecure temporary file usage in Shadow may allow local users to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/shadow | * | < 4.1.2.2 | >= 4.1.2.2 |
Shadow is a set of tools to deal with user accounts.
Paul Szabo reported a race condition in the "login" executable when setting up tty permissions.
A local attacker belonging to the "utmp" group could use symlink attacks to overwrite arbitrary files and possibly gain root privileges.
There is no known workaround at this time.
All Shadow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.1.2.2"
A security issue in shadow allows a local user to perform certain actions with escalated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/shadow | * | < 4.0.15-r2 | >= 4.0.15-r2 |
shadow provides a set of utilities to deal with user accounts.
When the mailbox is created in useradd, the "open()" function does not receive the three arguments it expects while O_CREAT is present, which leads to random permissions on the created file, before fchmod() is executed.
Depending on the random permissions given to the mailbox file which is at this time owned by root, a local user may be able to open this file for reading or writing, or even executing it, maybe as the root user.
There is no known workaround at this time.
All shadow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.0.15-r2"
A flaw in the chfn and chsh utilities might allow modification of account properties by unauthorized users.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/shadow | * | < 4.0.5-r1 | >= 4.0.5-r1 |
shadow provides a set of utilities to deal with user accounts.
Martin Schulze reported a flaw in the passwd_check() function in "libmisc/pwdcheck.c" which is used by chfn and chsh.
A logged-in local user with an expired password may be able to use chfn and chsh to change his standard shell or GECOS information (full name, phone number...) without being required to change his password.
There is no known workaround at this time.
All shadow users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/shadow-4.0.5-r1"