Security update for joe

This update for joe fixes the following issue CVE-2026-13412: arbitrary command execution via malicious tags file bsc1269379. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

SUSE-SU-2026:3108-1 Security update for joe

This update for joe fixes the following issue - CVE-2026-13412: arbitrary command execution via malicious tags file bsc1269379...

PT-2026-60976

Name of the Vulnerable Software and Affected Versions joe versions prior to 4.6-4.1 Description An issue allows arbitrary command execution through the use of a malicious tags file. Recommendations Update to version 4.6-4.1...

Debian Security Advisory DSA 003-1 (joe)

The remote host is missing an update to joe announced via advisory DSA 003-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-041-1 : joe - local exploit

Christer Oberg of Wkit Security AB found a problem in joe Joe's Own Editor. joe will look for a configuration file in three locations: The current directory, the users homedirectory $HOME and in /etc/joe. Since the configuration file can define commands joe will run for example to check spelling...

CVE-2001-0289

The CVE-2001-0289 entry concerns the joe text editor (version 2.8). It vulnerably searches for a .joerc configuration file in the current working directory, the user’s home directory, and then /etc/joe. This enables a local attacker to place a Trojan Horse .joerc in a directory and cause other us...

FreeBSD-SA-01:04.joe

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:04 Security Advisory FreeBSD, Inc. Topic: joe creates insecure recovery files Category: ports Module: joe Announced: 2001-01-15 Credits: Christer �berg and Patrik...

[SECURITY] [DSA-003-1] Revised security fix for joe

Package : joe Problem type : symlink attack Debian-specific: no The security fix for joe released on November 22, 2000 had a problem: it created the DEADJOE file securily but didnt write anything to it. This has been fixed in version 2.8.15.2 . This is the text from the previous advisory: When jo...

[SECURITY] New version of joe released

Package : joe Problem type : symlink attack Debian-specific: no When joe Joes Own Editor dies due to a signal instead of a normal exit it saves a list of the files it is editing to a file called DEADJOE in its current directory. Unfortunately this wasnt done safely which made joe vulnerable to a...

[SECURITY] New version of joe released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 22, 2000 - ------------------------------------------------------------------------ Package : joe Problem type : symlink...