[ GLSA 201805-15 ] beep

[GLSA]

Gentoo Linux Security Advisory

Title: beep: Local privilege escalation (GLSA 201805-15)
Severity: normal
Exploitable: remote
Date: 2018-05-30
Bug(s): #652330
ID: 201805-15

Synopsis

A vulnerability in beep could allow local attackers to escalate
privileges.


Background

The advanced PC speaker beeper.

Affected Packages

Package: app-misc/beep
Vulnerable: < 1.3-r3
Unaffected: >= 1.3-r3
Architectures: All supported architectures


Description

A race condition, if setuid, was discovered in beep.

Impact

A local attacker could escalate privileges.

Workaround

There is no known workaround at this time.

Resolution

All beep users should upgrade to the latest version: