Lucene search

K
osvGoogleOSV:DLA-0006-1
HistoryJun 16, 2014 - 12:00 a.m.

scheme48 - security update

2014-06-1600:00:00
Google
osv.dev
7

0.0004 Low

EPSS

Percentile

5.1%

The function scheme48-send-definition in cmuscheme48.el blindly
overwrites the file /tmp/s48lose.tmp prior to sending it to the
inferior scheme process.

This action will blindly overwrite files the user has permission
to modify, causing data-loss.

For Debian 6 Squeeze, these issues have been fixed in scheme48 version 1.8+dfsg-1+deb6u1

CPENameOperatorVersion
scheme48eq1.8+dfsg-1

0.0004 Low

EPSS

Percentile

5.1%