[ MDVSA-2008:153 ] - Updated emacs packages fix vulnerability
To: [email protected]
Subject: [ MDVSA-2008:153 ] - Updated emacs packages fix vulnerability
Date: Wed, 23 Jul 2008 15:56:00 -0600
From: [email protected]
Reply-To: <xsecurity@mandriva.com.>
Message-Id: <E1KLmJU-0006lr-95@titan.mandriva.com.>
X-Virus-Scanned: antivirus-gw at tyumen.ru
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2008:153
http://www.mandriva.com/security/
_______________________________________________________________________
Package : emacs
Date : July 23, 2008
Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0
_______________________________________________________________________
Problem Description:
A vulnerability in emacs was found where an attacker could provide
a group of files containing local variable definitions and arbitrary
Lisp code to be executed when one of the provided files is opened by
emacs (CVE-2008-2142).
The updated packages have been patched to correct this issue.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2007.1:
d74dae9fd1bd25a85ad129942acedda9 2007.1/i586/emacs-21.4-26.4mdv2007.1.i586.rpm
a8722c58647f3459d7fa1091129d36d2 2007.1/i586/emacs-doc-21.4-26.4mdv2007.1.i586.rpm
34887a7e1f7555db0ec555e8fa4fc632 2007.1/i586/emacs-el-21.4-26.4mdv2007.1.i586.rpm
e5a9e7e14e0df3d647a5c96bd9372460 2007.1/i586/emacs-leim-21.4-26.4mdv2007.1.i586.rpm
1c9838c3a561ad8813d4b5cee8b82400 2007.1/i586/emacs-nox-21.4-26.4mdv2007.1.i586.rpm
b9892f4738715018b2e6df7d02e6687d 2007.1/i586/emacs-X11-21.4-26.4mdv2007.1.i586.rpm
af96e6a121eb5f8b8170ff941114c489 2007.1/SRPMS/emacs-21.4-26.4mdv2007.1.src.rpm
Mandriva Linux 2007.1/X86_64:
600d616346db08ca13bdf11ddbcef44b 2007.1/x86_64/emacs-21.4-26.4mdv2007.1.x86_64.rpm
928441ff823f240f73538d3158153fbe 2007.1/x86_64/emacs-doc-21.4-26.4mdv2007.1.x86_64.rpm
60e33fa1d0bdf71a779a037c15d1985c 2007.1/x86_64/emacs-el-21.4-26.4mdv2007.1.x86_64.rpm
198718097f7a60bff2a68af82db28a43 2007.1/x86_64/emacs-leim-21.4-26.4mdv2007.1.x86_64.rpm
4299965f8b4b183af31e3f898c81110f 2007.1/x86_64/emacs-nox-21.4-26.4mdv2007.1.x86_64.rpm
5ca6f64f83f530f8b51d271bc8ec726e 2007.1/x86_64/emacs-X11-21.4-26.4mdv2007.1.x86_64.rpm
af96e6a121eb5f8b8170ff941114c489 2007.1/SRPMS/emacs-21.4-26.4mdv2007.1.src.rpm
Mandriva Linux 2008.0:
024e38f1ec4e6eabae4b274da83dde18 2008.0/i586/emacs-22.1-5.3mdv2008.0.i586.rpm
4214b10282db0615b9b729f187934db1 2008.0/i586/emacs-common-22.1-5.3mdv2008.0.i586.rpm
22ff8c91f547061d333465ded6a2d0da 2008.0/i586/emacs-doc-22.1-5.3mdv2008.0.i586.rpm
304b35b5af43ba47a736d2c0d9a8faa2 2008.0/i586/emacs-el-22.1-5.3mdv2008.0.i586.rpm
97788932323d9f7e2250d30f97ce3f8c 2008.0/i586/emacs-gtk-22.1-5.3mdv2008.0.i586.rpm
2406a6b60ee316bc1c67385b0db82cf8 2008.0/i586/emacs-leim-22.1-5.3mdv2008.0.i586.rpm
12883d439574ef26201af9c504144b9f 2008.0/i586/emacs-nox-22.1-5.3mdv2008.0.i586.rpm
d333358ad7b06f3f0c0db4fea12e1570 2008.0/SRPMS/emacs-22.1-5.3mdv2008.0.src.rpm
Mandriva Linux 2008.0/X86_64:
d57e83291c764980266625bcb889cc87 2008.0/x86_64/emacs-22.1-5.3mdv2008.0.x86_64.rpm
03cef7dd549b3d65e11c8d12875516cf 2008.0/x86_64/emacs-common-22.1-5.3mdv2008.0.x86_64.rpm
94f8e4725a640069161a0f86cee69195 2008.0/x86_64/emacs-doc-22.1-5.3mdv2008.0.x86_64.rpm
a1b95c035307112fc7ccbed4ce53975c 2008.0/x86_64/emacs-el-22.1-5.3mdv2008.0.x86_64.rpm
f47c2c3bffd8ecaeffec9bb3b19c94e8 2008.0/x86_64/emacs-gtk-22.1-5.3mdv2008.0.x86_64.rpm
118252721969c9ce844cebdcbcd3f8a7 2008.0/x86_64/emacs-leim-22.1-5.3mdv2008.0.x86_64.rpm
6c5622ed590a236cf2576814dd87ec9d 2008.0/x86_64/emacs-nox-22.1-5.3mdv2008.0.x86_64.rpm
d333358ad7b06f3f0c0db4fea12e1570 2008.0/SRPMS/emacs-22.1-5.3mdv2008.0.src.rpm
Mandriva Linux 2008.1:
29455a1008c19f2f0d7d8abb2a653c73 2008.1/i586/emacs-22.1-7.2mdv2008.1.i586.rpm
98a8a2d6fa0aaa7cde7770759012a411 2008.1/i586/emacs-common-22.1-7.2mdv2008.1.i586.rpm
5c08857d28e60a6834bee8e77d6725c3 2008.1/i586/emacs-doc-22.1-7.2mdv2008.1.i586.rpm
50c31d9e899581584a78490b0a27c837 2008.1/i586/emacs-el-22.1-7.2mdv2008.1.i586.rpm
ce0ad85bc6539d1303c5658f24417670 2008.1/i586/emacs-gtk-22.1-7.2mdv2008.1.i586.rpm
7f4413c929c28b926c3887985fa3b0a2 2008.1/i586/emacs-leim-22.1-7.2mdv2008.1.i586.rpm
51844adc76e16167fdd4db0d61daffe8 2008.1/i586/emacs-nox-22.1-7.2mdv2008.1.i586.rpm
cf941f26a979357e553b0cb973a7c7ab 2008.1/SRPMS/emacs-22.1-7.2mdv2008.1.src.rpm
Mandriva Linux 2008.1/X86_64:
6961fbbb8bafde024f192ce2bb536138 2008.1/x86_64/emacs-22.1-7.2mdv2008.1.x86_64.rpm
41f14023d94c42112ac6b9e5063e9fc7 2008.1/x86_64/emacs-common-22.1-7.2mdv2008.1.x86_64.rpm
228d317d952c8ece0c8c64b091717826 2008.1/x86_64/emacs-doc-22.1-7.2mdv2008.1.x86_64.rpm
bcb34100a279a0727192cfefa898486f 2008.1/x86_64/emacs-el-22.1-7.2mdv2008.1.x86_64.rpm
a7f2b52088198749411707b9fde36f2a 2008.1/x86_64/emacs-gtk-22.1-7.2mdv2008.1.x86_64.rpm
bb4f8dafeb0696b7e5c739abdd91a0cf 2008.1/x86_64/emacs-leim-22.1-7.2mdv2008.1.x86_64.rpm
83064451a138656cbefb593faa354cc9 2008.1/x86_64/emacs-nox-22.1-7.2mdv2008.1.x86_64.rpm
cf941f26a979357e553b0cb973a7c7ab 2008.1/SRPMS/emacs-22.1-7.2mdv2008.1.src.rpm
Corporate 3.0:
aa44fea1e2985d86ed71f48eac5abec1 corporate/3.0/i586/emacs-21.3-9.5.C30mdk.i586.rpm
be5642981a031290778de67d9556f868 corporate/3.0/i586/emacs-el-21.3-9.5.C30mdk.i586.rpm
5e54605b3cffe03ba9de9124272c959b corporate/3.0/i586/emacs-leim-21.3-9.5.C30mdk.i586.rpm
97d5a50d7ec4b6f75c38bcca83309192 corporate/3.0/i586/emacs-nox-21.3-9.5.C30mdk.i586.rpm
96871dcd19d6ae0d23cc9d03f52408cf corporate/3.0/i586/emacs-X11-21.3-9.5.C30mdk.i586.rpm
d8ab165d73eeb1a5e8643632fcbf8b8c corporate/3.0/SRPMS/emacs-21.3-9.5.C30mdk.src.rpm
Corporate 3.0/X86_64:
cfb4c6e5c48e6adccc9b23cc010b7252 corporate/3.0/x86_64/emacs-21.3-9.5.C30mdk.x86_64.rpm
71f61c5b428497dc8a10f894eb6b6b26 corporate/3.0/x86_64/emacs-el-21.3-9.5.C30mdk.x86_64.rpm
24bb6c31bfbdb2d326a99fbb78affdae corporate/3.0/x86_64/emacs-leim-21.3-9.5.C30mdk.x86_64.rpm
36a9451b1820dfae7790db09118e1214 corporate/3.0/x86_64/emacs-nox-21.3-9.5.C30mdk.x86_64.rpm
000162f47d9476d0371b5e22d5b322ed corporate/3.0/x86_64/emacs-X11-21.3-9.5.C30mdk.x86_64.rpm
d8ab165d73eeb1a5e8643632fcbf8b8c corporate/3.0/SRPMS/emacs-21.3-9.5.C30mdk.src.rpm
Corporate 4.0:
7ea53f218d5f2cd10c9453e037532c63 corporate/4.0/i586/emacs-21.4-20.4.20060mlcs4.i586.rpm
9ef2b2ae079cde479e3c74360778b84a corporate/4.0/i586/emacs-doc-21.4-20.4.20060mlcs4.i586.rpm
7cfa4a5ee6b58c9fce5bef6f4fc8985d corporate/4.0/i586/emacs-el-21.4-20.4.20060mlcs4.i586.rpm
71fd5a4bbb715b58f279e1281915de84 corporate/4.0/i586/emacs-leim-21.4-20.4.20060mlcs4.i586.rpm
22fc643aff3581bdfdc6d2c021df1ca8 corporate/4.0/i586/emacs-nox-21.4-20.4.20060mlcs4.i586.rpm
f943ee6d0fda515238cb8f3c6db8a4e5 corporate/4.0/i586/emacs-X11-21.4-20.4.20060mlcs4.i586.rpm
82c6556a9f0d125a15d2df02c49807db corporate/4.0/SRPMS/emacs-21.4-20.4.20060mlcs4.src.rpm
Corporate 4.0/X86_64:
6a1e64628ce09fd63366b5e41d90286f corporate/4.0/x86_64/emacs-21.4-20.4.20060mlcs4.x86_64.rpm
c979719c9aa18c47b0892f735af54529 corporate/4.0/x86_64/emacs-doc-21.4-20.4.20060mlcs4.x86_64.rpm
a470c830c769e694481dc53c22cfc351 corporate/4.0/x86_64/emacs-el-21.4-20.4.20060mlcs4.x86_64.rpm
9042d89bcdf57c898ef17c56ff3dfd9a corporate/4.0/x86_64/emacs-leim-21.4-20.4.20060mlcs4.x86_64.rpm
ccb0b523841d34b9cc77d6b083104068 corporate/4.0/x86_64/emacs-nox-21.4-20.4.20060mlcs4.x86_64.rpm
97ad08d31dc9e606a9c9ed0bfe6cf1fd corporate/4.0/x86_64/emacs-X11-21.4-20.4.20060mlcs4.x86_64.rpm
82c6556a9f0d125a15d2df02c49807db corporate/4.0/SRPMS/emacs-21.4-20.4.20060mlcs4.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFIh5QUmqjQ0CJFipgRAnIWAJ0c0RJIQipIM8P9hIspzhZ1IZYwEQCg0zxA
VROAjOI7Kiy7SHFZks+TlI8=
=Q2TO
-----END PGP SIGNATURE-----
