Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=535d04e61cdb780e66948b4fce6e20660d6c6531
commit 535d04e61cdb780e66948b4fce6e20660d6c6531 Author: Miklos Vajna <[EMAIL PROTECTED]> Date: Mon Apr 14 16:37:44 2008 +0200 FSA423-emacs diff --git a/frugalware/xml/security.xml b/frugalware/xml/security.xml index b666e52..0e44df9 100644 --- a/frugalware/xml/security.xml +++ b/frugalware/xml/security.xml @@ -27,6 +27,16 @@ <fsas> <fsa> + <id>423</id> + <date>2008-04-14</date> + <package>emacs</package> + <vulnerable>22.1-2</vulnerable> + <unaffected>22.1-3kalgan1</unaffected> + <bts>http://bugs.frugalware.org/task/3006</bts> + <cve>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1694</cve> + <desc>Steve Grubb discovered that vcdiff script as shipped with Emacs uses temporary files insecurely, which makes it possible for local attacker to conduct a symlink attack and make the victim overwrite arbitrary file.</desc> + </fsa> + <fsa> <id>422</id> <date>2008-04-14</date> <package>vlc</package> _______________________________________________ Frugalware-git mailing list Frugalware-git@frugalware.org http://frugalware.org/mailman/listinfo/frugalware-git
