CVE-2017-7480

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.

Date published : 2017-07-21

https://security.gentoo.org/glsa/201805-11

http://seclists.org/oss-sec/2017/q2/643