Lucene search

K
mageiaGentoo FoundationMGASA-2014-0250
HistoryJun 06, 2014 - 9:47 a.m.

Updated emacs packages fix CVE-2014-3421-4

2014-06-0609:47:18
Gentoo Foundation
advisories.mageia.org
17

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

EPSS

0

Percentile

5.1%

Updated emacs packages fix security vulnerabilities: Steve Kemp discovered multiple temporary file handling issues in Emacs. A local attacker could use these flaws to perform symbolic link attacks against users running Emacs (CVE-2014-3421, CVE-2014-3422, CVE-2014-3423, CVE-2014-3424).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchemacs< 24.2-5.1emacs-24.2-5.1.mga3
Mageia4noarchemacs< 24.3-4.1emacs-24.3-4.1.mga4

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

EPSS

0

Percentile

5.1%