[ GLSA 201812-08 ] Scala

[GLSA]

Gentoo Linux Security Advisory

Title: Scala: Privilege escalation (GLSA 201812-08)
Severity: normal
Exploitable: local
Date: 2018-12-15
Bug(s): #637940
ID: 201812-08

Synopsis

A vulnerability in Scala could result in privilege escalation.

Background

Scala combines object-oriented and functional programming in one
concise, high-level language.


Affected Packages

Package: dev-lang/scala
Vulnerable: < 2.12.4
Unaffected: >= 2.12.4
Architectures: All supported architectures


Description

It was discovered that Scala’s compilation daemon does not properly
manage permissions for private files.


Impact

A local attacker could escalate privileges.

Workaround

There is no known workaround at this time.

Resolution

All Scala users should upgrade to the latest version: