CVE-2007-6249: etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge...

Security readout for executives and security teams

This flaw affects Gentoo systems using Portage before 2.1.3.11. The etc-update tool could create temporary merge files with weaker permissions than the original configuration files, letting local users read sensitive information. Risk is mainly for shared or multi-user Gentoo hosts. Exposure is limited to Gentoo Linux systems using Portage before 2.1.3.11, especially hosts where untrusted or lower-privileged local users have accounts. Prioritize remediation for shared Gentoo servers or systems storing secrets in configuration files. Single-user or isolated Gentoo systems are lower urgency, but still should be updated during normal maintenance. Mitigation focus: Upgrade affected Gentoo Portage installations to 2.1.3.11 or later.; Review Gentoo GLSA-200712-11 and vendor guidance for exact package actions.; Limit local shell access on affected shared Gentoo hosts until remediated..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.