Gentoo Linux Security Advisory GLSA 200710-11 – iDefense reported that the xfs init script does not correctly handle a race condition when setting permissions of a temporary file. Sean Larsson discovered an integer overflow vulnerability in the build_range() function possibly leading to a heap-based buffer overflow when handling QueryXBitmaps and QueryXExtents protocol requests. Sean Larsson also discovered an error in the swap_char2b() function possibly leading to a heap corruption when handling the same protocol requests. Versions less than 1.0.5 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60074/glsa-200710-11.txt
Source: https://packetstormsecurity.com/files/60074/Gentoo-Linux-Security-Advisory-200710-11.html