emacs: multiple vulnerabilities
| Package(s): | emacs | CVE #(s): | CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 | ||||||||||||||||||||
| Created: | May 30, 2014 | Updated: | March 29, 2015 | ||||||||||||||||||||
| Description: | From the Red Hat bug report: Steve Kemp discovered multiple temporary file handling issues in Emacs. A local attacker could use these flaws to perform symbolic link attacks against users running Emacs. Original report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747100 CVE-2014-3421 was assigned to the issue in lisp/gnus/gnus-fun.el Upstream fix: http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00055.html CVE-2014-3422 was assigned to the issue in lisp/emacs-lisp/find-gc.el Upstream fix: http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00056.html CVE-2014-3423 was assigned to the issue in lisp/net/browse-url.el (this one does not currently have a fix) Upstream note: http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00057.html CVE-2014-3424 was assigned to the issue in lisp/net/tramp.el Upstream fix: http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00060.html | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||