Mageia alert MGASA-2014-0250 (emacs)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2014-0250: Updated emacs packages fix CVE-2014-3421-4 
Date:
    	     
 
Fri, 6 Jun 2014 07:47:29 +0200
Message-ID:
    	     
 
<20140606054729.D87175C8C2@valstar.mageia.org>
MGASA-2014-0250 - Updated emacs packages fix CVE-2014-3421-4

Publication date: 06 Jun 2014
URL: http://advisories.mageia.org/MGASA-2014-0250.html

Type: security
Affected Mageia releases: 3, 4
CVE: CVE-2014-3421,
     CVE-2014-3422,
     CVE-2014-3423,
     CVE-2014-3424

Description:
Updated emacs packages fix security vulnerabilities:

Steve Kemp discovered multiple temporary file handling issues in Emacs.
A local attacker could use these flaws to perform symbolic link attacks 
against users running Emacs (CVE-2014-3421, CVE-2014-3422, CVE-2014-3423,
CVE-2014-3424).

References:
- https://lists.fedoraproject.org/pipermail/package-announc...
- https://bugs.mageia.org/show_bug.cgi?id=13458

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3421

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3422

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3423

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3424


SRPMS:
- 4/core/emacs-24.3-4.1.mga4
- 3/core/emacs-24.2-5.1.mga3