Gentoo has released updated packages to correct a vulnerability identified in Perl, Qt-UnixODBC and CMake. This flaw is due to an error where some packages may introduce insecure paths into the list of directories that are searched for libraries at runtime, which could be exploited by a member of the "portage" group to create a malicious shared object in the Portage temporary build directory that would be loaded at runtime by a dependent executable, potentially resulting in privilege escalation.
