Gentoo Security Advisory GLSA 200407-01 (esearch)

The remote host is missing updates announced in advisory GLSA 200407-01.
All users should upgrade to the latest available version of esearch, as follows: # emerge sync # emerge -pv '>=app-portage/esearch-0.6.2' # emerge '>=app-portage/esearch-0.6.2'
The eupdatedb utility in esearch creates a file in /tmp without first checking for symlinks. This makes it possible for any user to create arbitrary files.