Steve Kemp discovered the _rl_tropen() function in readline insecurely handled a temporary file. This could allow a local attacker to perform symbolic link attacks (CVE-2014-2524). Also, upstream patches have been added to fix an infinite loop in vi input mode, and to fix an issue with slowness when pasting text.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 3 | noarch | readline | < 6.2-7.1 | readline-6.2-7.1.mga3 |
Mageia | 4 | noarch | readline | < 6.2-9.1 | readline-6.2-9.1.mga4 |