Joined: 12 May 2004
|Posted: Mon Oct 28, 2013 5:26 pm Post subject: [ GLSA 201310-20 ] acpid2: Privilege escalation
|Gentoo Linux Security Advisory
Title: acpid2: Privilege escalation (GLSA 201310-20)
Date: October 28, 2013
A vulnerability in acpid2 may allow a local attacker to gain
acpid2 is a daemon for Advanced Configuration and Power Interface.
Vulnerable: < 2.0.17
Unaffected: >= 2.0.17
Architectures: All supported architectures
acpid2 does not properly use the pidof program in powerbtn.sh.
A local attacker could gain escalated privileges.
There is no known workaround at this time.
All acpid2 users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-power/acpid-2.0.17"