full-disclosure - [ MDVSA-2008:153 ] - Updated emacs packages fix vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-Id: <E1KLmJU-0006lw-CL@titan.mandriva.com>
Date: Wed, 23 Jul 2008 15:56:00 -0600
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDVSA-2008:153 ] - Updated emacs packages fix
	vulnerability


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDVSA-2008:153
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : emacs
 Date    : July 23, 2008
 Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0
 _______________________________________________________________________
 
 Problem Description:
 
 A vulnerability in emacs was found where an attacker could provide
 a group of files containing local variable definitions and arbitrary
 Lisp code to be executed when one of the provided files is opened by
 emacs (CVE-2008-2142).
 
 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2142
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.1:
 d74dae9fd1bd25a85ad129942acedda9  2007.1/i586/emacs-21.4-26.4mdv2007.1.i586.rpm
 a8722c58647f3459d7fa1091129d36d2  2007.1/i586/emacs-doc-21.4-26.4mdv2007.1.i586.rpm
 34887a7e1f7555db0ec555e8fa4fc632  2007.1/i586/emacs-el-21.4-26.4mdv2007.1.i586.rpm
 e5a9e7e14e0df3d647a5c96bd9372460  2007.1/i586/emacs-leim-21.4-26.4mdv2007.1.i586.rpm
 1c9838c3a561ad8813d4b5cee8b82400  2007.1/i586/emacs-nox-21.4-26.4mdv2007.1.i586.rpm
 b9892f4738715018b2e6df7d02e6687d  2007.1/i586/emacs-X11-21.4-26.4mdv2007.1.i586.rpm 
 af96e6a121eb5f8b8170ff941114c489  2007.1/SRPMS/emacs-21.4-26.4mdv2007.1.src.rpm

 Mandriva Linux 2007.1/X86_64:
 600d616346db08ca13bdf11ddbcef44b  2007.1/x86_64/emacs-21.4-26.4mdv2007.1.x86_64.rpm
 928441ff823f240f73538d3158153fbe  2007.1/x86_64/emacs-doc-21.4-26.4mdv2007.1.x86_64.rpm
 60e33fa1d0bdf71a779a037c15d1985c  2007.1/x86_64/emacs-el-21.4-26.4mdv2007.1.x86_64.rpm
 198718097f7a60bff2a68af82db28a43  2007.1/x86_64/emacs-leim-21.4-26.4mdv2007.1.x86_64.rpm
 4299965f8b4b183af31e3f898c81110f  2007.1/x86_64/emacs-nox-21.4-26.4mdv2007.1.x86_64.rpm
 5ca6f64f83f530f8b51d271bc8ec726e  2007.1/x86_64/emacs-X11-21.4-26.4mdv2007.1.x86_64.rpm 
 af96e6a121eb5f8b8170ff941114c489  2007.1/SRPMS/emacs-21.4-26.4mdv2007.1.src.rpm

 Mandriva Linux 2008.0:
 024e38f1ec4e6eabae4b274da83dde18  2008.0/i586/emacs-22.1-5.3mdv2008.0.i586.rpm
 4214b10282db0615b9b729f187934db1  2008.0/i586/emacs-common-22.1-5.3mdv2008.0.i586.rpm
 22ff8c91f547061d333465ded6a2d0da  2008.0/i586/emacs-doc-22.1-5.3mdv2008.0.i586.rpm
 304b35b5af43ba47a736d2c0d9a8faa2  2008.0/i586/emacs-el-22.1-5.3mdv2008.0.i586.rpm
 97788932323d9f7e2250d30f97ce3f8c  2008.0/i586/emacs-gtk-22.1-5.3mdv2008.0.i586.rpm
 2406a6b60ee316bc1c67385b0db82cf8  2008.0/i586/emacs-leim-22.1-5.3mdv2008.0.i586.rpm
 12883d439574ef26201af9c504144b9f  2008.0/i586/emacs-nox-22.1-5.3mdv2008.0.i586.rpm 
 d333358ad7b06f3f0c0db4fea12e1570  2008.0/SRPMS/emacs-22.1-5.3mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 d57e83291c764980266625bcb889cc87  2008.0/x86_64/emacs-22.1-5.3mdv2008.0.x86_64.rpm
 03cef7dd549b3d65e11c8d12875516cf  2008.0/x86_64/emacs-common-22.1-5.3mdv2008.0.x86_64.rpm
 94f8e4725a640069161a0f86cee69195  2008.0/x86_64/emacs-doc-22.1-5.3mdv2008.0.x86_64.rpm
 a1b95c035307112fc7ccbed4ce53975c  2008.0/x86_64/emacs-el-22.1-5.3mdv2008.0.x86_64.rpm
 f47c2c3bffd8ecaeffec9bb3b19c94e8  2008.0/x86_64/emacs-gtk-22.1-5.3mdv2008.0.x86_64.rpm
 118252721969c9ce844cebdcbcd3f8a7  2008.0/x86_64/emacs-leim-22.1-5.3mdv2008.0.x86_64.rpm
 6c5622ed590a236cf2576814dd87ec9d  2008.0/x86_64/emacs-nox-22.1-5.3mdv2008.0.x86_64.rpm 
 d333358ad7b06f3f0c0db4fea12e1570  2008.0/SRPMS/emacs-22.1-5.3mdv2008.0.src.rpm

 Mandriva Linux 2008.1:
 29455a1008c19f2f0d7d8abb2a653c73  2008.1/i586/emacs-22.1-7.2mdv2008.1.i586.rpm
 98a8a2d6fa0aaa7cde7770759012a411  2008.1/i586/emacs-common-22.1-7.2mdv2008.1.i586.rpm
 5c08857d28e60a6834bee8e77d6725c3  2008.1/i586/emacs-doc-22.1-7.2mdv2008.1.i586.rpm
 50c31d9e899581584a78490b0a27c837  2008.1/i586/emacs-el-22.1-7.2mdv2008.1.i586.rpm
 ce0ad85bc6539d1303c5658f24417670  2008.1/i586/emacs-gtk-22.1-7.2mdv2008.1.i586.rpm
 7f4413c929c28b926c3887985fa3b0a2  2008.1/i586/emacs-leim-22.1-7.2mdv2008.1.i586.rpm
 51844adc76e16167fdd4db0d61daffe8  2008.1/i586/emacs-nox-22.1-7.2mdv2008.1.i586.rpm 
 cf941f26a979357e553b0cb973a7c7ab  2008.1/SRPMS/emacs-22.1-7.2mdv2008.1.src.rpm

 Mandriva Linux 2008.1/X86_64:
 6961fbbb8bafde024f192ce2bb536138  2008.1/x86_64/emacs-22.1-7.2mdv2008.1.x86_64.rpm
 41f14023d94c42112ac6b9e5063e9fc7  2008.1/x86_64/emacs-common-22.1-7.2mdv2008.1.x86_64.rpm
 228d317d952c8ece0c8c64b091717826  2008.1/x86_64/emacs-doc-22.1-7.2mdv2008.1.x86_64.rpm
 bcb34100a279a0727192cfefa898486f  2008.1/x86_64/emacs-el-22.1-7.2mdv2008.1.x86_64.rpm
 a7f2b52088198749411707b9fde36f2a  2008.1/x86_64/emacs-gtk-22.1-7.2mdv2008.1.x86_64.rpm
 bb4f8dafeb0696b7e5c739abdd91a0cf  2008.1/x86_64/emacs-leim-22.1-7.2mdv2008.1.x86_64.rpm
 83064451a138656cbefb593faa354cc9  2008.1/x86_64/emacs-nox-22.1-7.2mdv2008.1.x86_64.rpm 
 cf941f26a979357e553b0cb973a7c7ab  2008.1/SRPMS/emacs-22.1-7.2mdv2008.1.src.rpm

 Corporate 3.0:
 aa44fea1e2985d86ed71f48eac5abec1  corporate/3.0/i586/emacs-21.3-9.5.C30mdk.i586.rpm
 be5642981a031290778de67d9556f868  corporate/3.0/i586/emacs-el-21.3-9.5.C30mdk.i586.rpm
 5e54605b3cffe03ba9de9124272c959b  corporate/3.0/i586/emacs-leim-21.3-9.5.C30mdk.i586.rpm
 97d5a50d7ec4b6f75c38bcca83309192  corporate/3.0/i586/emacs-nox-21.3-9.5.C30mdk.i586.rpm
 96871dcd19d6ae0d23cc9d03f52408cf  corporate/3.0/i586/emacs-X11-21.3-9.5.C30mdk.i586.rpm 
 d8ab165d73eeb1a5e8643632fcbf8b8c  corporate/3.0/SRPMS/emacs-21.3-9.5.C30mdk.src.rpm

 Corporate 3.0/X86_64:
 cfb4c6e5c48e6adccc9b23cc010b7252  corporate/3.0/x86_64/emacs-21.3-9.5.C30mdk.x86_64.rpm
 71f61c5b428497dc8a10f894eb6b6b26  corporate/3.0/x86_64/emacs-el-21.3-9.5.C30mdk.x86_64.rpm
 24bb6c31bfbdb2d326a99fbb78affdae  corporate/3.0/x86_64/emacs-leim-21.3-9.5.C30mdk.x86_64.rpm
 36a9451b1820dfae7790db09118e1214  corporate/3.0/x86_64/emacs-nox-21.3-9.5.C30mdk.x86_64.rpm
 000162f47d9476d0371b5e22d5b322ed  corporate/3.0/x86_64/emacs-X11-21.3-9.5.C30mdk.x86_64.rpm 
 d8ab165d73eeb1a5e8643632fcbf8b8c  corporate/3.0/SRPMS/emacs-21.3-9.5.C30mdk.src.rpm

 Corporate 4.0:
 7ea53f218d5f2cd10c9453e037532c63  corporate/4.0/i586/emacs-21.4-20.4.20060mlcs4.i586.rpm
 9ef2b2ae079cde479e3c74360778b84a  corporate/4.0/i586/emacs-doc-21.4-20.4.20060mlcs4.i586.rpm
 7cfa4a5ee6b58c9fce5bef6f4fc8985d  corporate/4.0/i586/emacs-el-21.4-20.4.20060mlcs4.i586.rpm
 71fd5a4bbb715b58f279e1281915de84  corporate/4.0/i586/emacs-leim-21.4-20.4.20060mlcs4.i586.rpm
 22fc643aff3581bdfdc6d2c021df1ca8  corporate/4.0/i586/emacs-nox-21.4-20.4.20060mlcs4.i586.rpm
 f943ee6d0fda515238cb8f3c6db8a4e5  corporate/4.0/i586/emacs-X11-21.4-20.4.20060mlcs4.i586.rpm 
 82c6556a9f0d125a15d2df02c49807db  corporate/4.0/SRPMS/emacs-21.4-20.4.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 6a1e64628ce09fd63366b5e41d90286f  corporate/4.0/x86_64/emacs-21.4-20.4.20060mlcs4.x86_64.rpm
 c979719c9aa18c47b0892f735af54529  corporate/4.0/x86_64/emacs-doc-21.4-20.4.20060mlcs4.x86_64.rpm
 a470c830c769e694481dc53c22cfc351  corporate/4.0/x86_64/emacs-el-21.4-20.4.20060mlcs4.x86_64.rpm
 9042d89bcdf57c898ef17c56ff3dfd9a  corporate/4.0/x86_64/emacs-leim-21.4-20.4.20060mlcs4.x86_64.rpm
 ccb0b523841d34b9cc77d6b083104068  corporate/4.0/x86_64/emacs-nox-21.4-20.4.20060mlcs4.x86_64.rpm
 97ad08d31dc9e606a9c9ed0bfe6cf1fd  corporate/4.0/x86_64/emacs-X11-21.4-20.4.20060mlcs4.x86_64.rpm 
 82c6556a9f0d125a15d2df02c49807db  corporate/4.0/SRPMS/emacs-21.4-20.4.20060mlcs4.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFIh5QUmqjQ0CJFipgRAnIWAJ0c0RJIQipIM8P9hIspzhZ1IZYwEQCg0zxA
VROAjOI7Kiy7SHFZks+TlI8=
=Q2TO
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/