Description
Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.
References
- 10060 vdb-entry
- GLSA-200404-01 vendor-advisory
- 11305 third-party-advisory
- portage-lockfile-hardlink(15754) vdb-entry