Gentoo Security Advisory GLSA 200612-15 (vlnx)

Summary
The remote host is missing updates announced in advisory GLSA 200612-15.
Solution
As VirusScan verifies that it has not been modified before executing, it is not possible to correct the DT_RPATH. Furthermore, this would violate the license that VirusScan is distributed under. For this reason, the package has been masked in Portage pending the resolution of this issue. # emerge --ask --verbose --unmerge 'app-antivirus/vlnx' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200612-15 http://bugs.gentoo.org/show_bug.cgi?id=156989
Insight
McAfee VirusScan for Linux is distributed with an insecure DT_RPATH, potentially allowing a remote attacker to execute arbitrary code.