[ GLSA 202007-32 ] Sarg

[GLSA]

Gentoo Linux Security Advisory

Title: Sarg: Local privilege escalation (GLSA 202007-32)
Severity: high
Exploitable: local
Date: 2020-07-27
Bug(s): #706748
ID: 202007-32

Synopsis

A flaw in Sarg may allow local privilege escalation.

Background

Sarg (Squid Analysis Report Generator) is a tool that provides many
informations about the Squid web proxy server users activities: time,
sites, traffic, etc.


Affected Packages

Package: net-analyzer/sarg
Vulnerable: < 2.4.0
Unaffected: >= 2.4.0
Architectures: All supported architectures


Description

A flaw in Sarg’s handling of temporary directories was discovered.

Impact

A local attacker may be able to escalate privileges.

Workaround

There is no known workaround at this time.

Resolution

All Sarg users should upgrade to the latest version: