exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2014-118

Mandriva Linux Security Advisory 2014-118
Posted Jun 12, 2014
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2014-118 - Steve Kemp discovered multiple temporary file handling issues in Emacs. A local attacker could use these flaws to perform symbolic link attacks against users running Emacs.

tags | advisory, local
systems | linux, mandriva
advisories | CVE-2014-3421, CVE-2014-3422, CVE-2014-3423
SHA-256 | 99f3f5d644b162801353be9e8461a2ff9a833ac9c2d615b7df6aad2c4c2ab4c3

Mandriva Linux Security Advisory 2014-118

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2014:118
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : emacs
Date : June 10, 2014
Affected: Business Server 1.0, Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

Updated emacs packages fix security vulnerabilities:

Steve Kemp discovered multiple temporary file handling issues in
Emacs. A local attacker could use these flaws to perform symbolic link
attacks against users running Emacs (CVE-2014-3421, CVE-2014-3422,
CVE-2014-3423).
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3421
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3422
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3423
http://advisories.mageia.org/MGASA-2014-0250.html
_______________________________________________________________________

Updated Packages:

Mandriva Enterprise Server 5:
83009e4450f55eb7f93487bfab04992b mes5/i586/emacs-22.3-2.2mdvmes5.2.i586.rpm
d9412d95a1b028402920507d87b1e6fe mes5/i586/emacs-common-22.3-2.2mdvmes5.2.i586.rpm
5caded9b5a33f65fcf10d52ef60fa863 mes5/i586/emacs-doc-22.3-2.2mdvmes5.2.i586.rpm
6073a97d86acd7050a240227476ff3bd mes5/i586/emacs-el-22.3-2.2mdvmes5.2.i586.rpm
8cd658a90f7ff05b66181469cc12368c mes5/i586/emacs-gtk-22.3-2.2mdvmes5.2.i586.rpm
55f9dfb68988f301a90cc624f5ad192a mes5/i586/emacs-leim-22.3-2.2mdvmes5.2.i586.rpm
090073979e73b9742fcd4a5190cb999b mes5/i586/emacs-nox-22.3-2.2mdvmes5.2.i586.rpm
4234da3f31cd692e8f1fee865cddc4d9 mes5/SRPMS/emacs-22.3-2.2mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
2ba85e69b3acc83227bcfb51443fc9dd mes5/x86_64/emacs-22.3-2.2mdvmes5.2.x86_64.rpm
342aac6ff5ed1f26c7a22de98c9c906b mes5/x86_64/emacs-common-22.3-2.2mdvmes5.2.x86_64.rpm
04edd833f535f8acd69d486be333e882 mes5/x86_64/emacs-doc-22.3-2.2mdvmes5.2.x86_64.rpm
3a10f0e8c0ae91361ceea87d420b89ec mes5/x86_64/emacs-el-22.3-2.2mdvmes5.2.x86_64.rpm
62e09ba4cb023e85b38b75f337e64446 mes5/x86_64/emacs-gtk-22.3-2.2mdvmes5.2.x86_64.rpm
f9b7df8137b06eb993b66e76bdd98286 mes5/x86_64/emacs-leim-22.3-2.2mdvmes5.2.x86_64.rpm
6247713e8fb162a4f6b6bd4e70a22586 mes5/x86_64/emacs-nox-22.3-2.2mdvmes5.2.x86_64.rpm
4234da3f31cd692e8f1fee865cddc4d9 mes5/SRPMS/emacs-22.3-2.2mdvmes5.2.src.rpm

Mandriva Business Server 1/X86_64:
b9d63442e90756239d0f654b5e486b28 mbs1/x86_64/emacs-23.3-9.2.mbs1.x86_64.rpm
e06aef0f36b8f9378272f4a3265923f2 mbs1/x86_64/emacs-common-23.3-9.2.mbs1.x86_64.rpm
e9496ba2853b1164c781d673dec466e4 mbs1/x86_64/emacs-doc-23.3-9.2.mbs1.x86_64.rpm
c7d86db9f5307bd72474d842993ab457 mbs1/x86_64/emacs-el-23.3-9.2.mbs1.noarch.rpm
9e6ee23c74741b1bcd26cd16b29c9083 mbs1/x86_64/emacs-leim-23.3-9.2.mbs1.x86_64.rpm
93b81f7e6891d99f8fb631de60caf26c mbs1/x86_64/emacs-nox-23.3-9.2.mbs1.x86_64.rpm
33ac06e008af0567e480d17e450d2db3 mbs1/SRPMS/emacs-23.3-9.2.mbs1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFTlwF/mqjQ0CJFipgRAtHdAKCsDqWPr8I2BCm5LIvpsF5lGbaqBgCg3g/U
mfQWuhuIHEsEeK7UXC1AvAo=
=wRim
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

November 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    30 Files
  • 2
    Nov 2nd
    0 Files
  • 3
    Nov 3rd
    0 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    44 Files
  • 6
    Nov 6th
    18 Files
  • 7
    Nov 7th
    9 Files
  • 8
    Nov 8th
    8 Files
  • 9
    Nov 9th
    3 Files
  • 10
    Nov 10th
    0 Files
  • 11
    Nov 11th
    14 Files
  • 12
    Nov 12th
    20 Files
  • 13
    Nov 13th
    63 Files
  • 14
    Nov 14th
    18 Files
  • 15
    Nov 15th
    8 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    18 Files
  • 19
    Nov 19th
    7 Files
  • 20
    Nov 20th
    13 Files
  • 21
    Nov 21st
    6 Files
  • 22
    Nov 22nd
    48 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    60 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    44 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close