Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gauche | Gauche | 0.8 (including) | 0.8 (including) |
| Gauche | Gauche | 0.8.1 (including) | 0.8.1 (including) |
| Gauche | Gauche | 0.8.2 (including) | 0.8.2 (including) |
| Gauche | Gauche | 0.8.3 (including) | 0.8.3 (including) |
| Gauche | Gauche | 0.8.4 (including) | 0.8.4 (including) |
| Gauche | Gauche | 0.8.5 (including) | 0.8.5 (including) |