less: Denial of service

Background

less is a pager and text file viewer.

Description

less suffered from a flaw in its terminal escape sequence handling which made its filtering incomplete.

Impact

Malicious input could clear the terminal output or otherwise manipulate it with faked interactions.

Workaround

There is no known workaround at this time.

Resolution

All less users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-apps/less-608-r2"