Two flaws in hesiod permitting privilege elevation

---

BEGIN PGP SIGNED MESSAGE

---

Hash: SHA256

> [] Weak SUID check allowing privilege elevation
>
> Hesiod unsafely checks EUID vs UID in a few places, consulting
> environment variables for configuration if they match. This could be
> u

woah. any solution or workaround to this?