| Package | Affected versions | Patched versions |
|---|---|---|
| uim | ≤ 0.5.0 |
Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM_VANILLA environment variable when a suid or sgid application is linked to libuim, such as immodule for Qt, which allows local users to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free