The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0.
| Software | From | Fixed in |
|---|---|---|
| gentoo / app-crypt_pinentry | 0.7.2-r1 | 0.7.2-r1.x |
| gentoo / app-crypt_pinentry | 0.7.2 | 0.7.2.x |
| gentoo / linux | - | - |