Gentoo Linux Security Advisory GLSA 200502-31 – Takumi Asaki discovered that uim insufficiently checks environment variables. setuid/setgid applications linked against libuim could end up executing arbitrary code. Versions below 0.4.5.1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36371/glsa-200502-31.txt
Source: https://packetstormsecurity.com/files/36371/Gentoo-Linux-Security-Advisory-200502-31.html