Gentoo: qt-dcgui file leaking vulnerability
All versions < 0.2.2 have a major security vulnerability in the directory parser.
Summary
- -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200302-03 - -------------------------------------------------------------------- DATE : 2003-02-04 15:03 UTC
- --------------------------------------------------------------------
From announcment:
"All versions < 0.2.2 have a major security vulnerability in the directory parser. This bug allow a remote attacker to download files outside the sharelist. It's recommend that you upgrade the packages immediatly."
Read the full announcment at:
SOLUTION
It is recommended that all Gentoo Linux users who are running net-p2p/qt-dcgui upgrade to qt-dcgui-0.2.4 as follows:
emerge sync emerge -u qt-dcgui emerge clean
- -------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at styx@gentoo.org - --------------------------------------------------------------------
Resolution
References
Availability
Concerns
Severity
PACKAGE : qt-dcgui
SUMMARY : file leaking
EXPLOIT : remote
