[ GLSA 201408-04 ] Catfish: Multiple Vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Catfish: Multiple Vulnerabilities (GLSA 201408-04)
Severity: normal
Exploitable: local
Date: August 13, 2014
Bug(s): #502536
ID: 201408-04

Synopsis

Multiple vulnerabilities have been found in Catfish, allowing local
attackers to escalate their privileges.


Background

Catfish is a versatile file searching tool.

Affected Packages

Package: dev-util/catfish
Vulnerable: < 1.0.2
Unaffected: >= 1.0.2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Catfish. Please review
the CVE identifiers referenced below for details.


Impact

A local attacker could gain escalated privileges via a specially crafted
shared library.


Workaround

There is no known workaround at this time.

Resolution

All Catfish users should upgrade to the latest version: