Gentoo: GLSA-200404-01 Normal: Portage Insecure Sandbox Denial of Service

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200404-01
~                                            https://security.gentoo.org/

~  Severity: Normal
~     Title: Insecure sandbox temporary lockfile vulnerabilities in
~            Portage
~      Date: April 04, 2004
~      Bugs: #21923
~        ID: 200404-01


Synopsis
=======
A flaw has been found in the temporary file handling algorithms for the
sandboxing code used within Portage. Lockfiles created during normal
Portage operation of portage could be manipulated by local usersresulting in the truncation of hard linked files; causing a Denial of
Service attack on the system.

Background
=========
Portage is Gentoo's package management system which is responsible for
installing, compiling and updating any ebuilds on the system through the
Gentoo rsync tree. Under default configurations, most ebuilds run under
a sandbox which prevent the build process writing to the "real" sy...
Read the Full Advisory