Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=83da100a0c96a6839140d71a9928f132ba6fc875
commit 83da100a0c96a6839140d71a9928f132ba6fc875 Author: Miklos Vajna <[EMAIL PROTECTED]> Date: Thu May 15 15:34:39 2008 +0200 FSA447-eterm diff --git a/frugalware/xml/security.xml b/frugalware/xml/security.xml index 9635d18..28d3171 100644 --- a/frugalware/xml/security.xml +++ b/frugalware/xml/security.xml @@ -26,6 +26,16 @@ <fsas> <fsa> + <id>447</id> + <date>2008-05-15</date> + <package>eterm</package> + <vulnerable>0.9.4-2</vulnerable> + <unaffected>0.9.4-3kalgan1</unaffected> + <bts>http://bugs.frugalware.org/task/2918</bts> + <cve>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1692</cve> + <desc>A security issue has been reported in Eterm, which can be exploited by malicious, local users to gain escalated privileges. Eterm 0.9.4 opens a terminal window on :0 if -display is not specified and the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.</desc> + </fsa> + <fsa> <id>446</id> <date>2008-05-15</date> <package>kdelibs</package> _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
