—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2014:118
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : emacs
Date : June 10, 2014
Affected: Business Server 1.0, Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

Updated emacs packages fix security vulnerabilities:

Steve Kemp discovered multiple temporary file handling issues in
Emacs. A local attacker could use these flaws to perform symbolic link
attacks against users running Emacs (CVE-2014-3421, CVE-2014-3422,
CVE-2014-3423).
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3421
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3422
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3423
http://advisories.mageia.org/MGASA-2014-0250.html
_______________________________________________________________________

Updated Packages:

Mandriva Enterprise Server 5:
83009e4450f55eb7f93487bfab04992b mes5/i586/emacs-22.3-2.2mdvmes5.2.i586.rpm
d9412d95a1b028402920507d87b1e6fe mes5/i586/emacs-common-22.3-2.2mdvmes5.2.i586.rpm
5caded9b5a33f65fcf10d52ef60fa863 mes5/i586/emacs-doc-22.3-2.2mdvmes5.2.i586.rpm
6073a97d86acd7050a240227476ff3bd mes5/i586/emacs-el-22.3-2.2mdvmes5.2.i586.rpm
8cd658a90f7ff05b66181469cc12368c mes5/i586/emacs-gtk-22.3-2.2mdvmes5.2.i586.rpm
55f9dfb68988f301a90cc624f5ad192a mes5/i586/emacs-leim-22.3-2.2mdvmes5.2.i586.rpm
090073979e73b9742fcd4a5190cb999b mes5/i586/emacs-nox-22.3-2.2mdvmes5.2.i586.rpm
4234da3f31cd692e8f1fee865cddc4d9 mes5/SRPMS/emacs-22.3-2.2mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
2ba85e69b3acc83227bcfb51443fc9dd mes5/x86_64/emacs-22.3-2.2mdvmes5.2.x86_64.rpm
342aac6ff5ed1f26c7a22de98c9c906b mes5/x86_64/emacs-common-22.3-2.2mdvmes5.2.x86_64.rpm
04edd833f535f8acd69d486be333e882 mes5/x86_64/emacs-doc-22.3-2.2mdvmes5.2.x86_64.rpm
3a10f0e8c0ae91361ceea87d420b89ec mes5/x86_64/emacs-el-22.3-2.2mdvmes5.2.x86_64.rpm
62e09ba4cb023e85b38b75f337e64446 mes5/x86_64/emacs-gtk-22.3-2.2mdvmes5.2.x86_64.rpm
f9b7df8137b06eb993b66e76bdd98286 mes5/x86_64/emacs-leim-22.3-2.2mdvmes5.2.x86_64.rpm
6247713e8fb162a4f6b6bd4e70a22586 mes5/x86_64/emacs-nox-22.3-2.2mdvmes5.2.x86_64.rpm
4234da3f31cd692e8f1fee865cddc4d9 mes5/SRPMS/emacs-22.3-2.2mdvmes5.2.src.rpm

Mandriva Business Server 1/X86_64:
b9d63442e90756239d0f654b5e486b28 mbs1/x86_64/emacs-23.3-9.2.mbs1.x86_64.rpm
e06aef0f36b8f9378272f4a3265923f2 mbs1/x86_64/emacs-common-23.3-9.2.mbs1.x86_64.rpm
e9496ba2853b1164c781d673dec466e4 mbs1/x86_64/emacs-doc-23.3-9.2.mbs1.x86_64.rpm
c7d86db9f5307bd72474d842993ab457 mbs1/x86_64/emacs-el-23.3-9.2.mbs1.noarch.rpm
9e6ee23c74741b1bcd26cd16b29c9083 mbs1/x86_64/emacs-leim-23.3-9.2.mbs1.x86_64.rpm
93b81f7e6891d99f8fb631de60caf26c mbs1/x86_64/emacs-nox-23.3-9.2.mbs1.x86_64.rpm
33ac06e008af0567e480d17e450d2db3 mbs1/SRPMS/emacs-23.3-9.2.mbs1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg –recv-keys –keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFTlwF/mqjQ0CJFipgRAtHdAKCsDqWPr8I2BCm5LIvpsF5lGbaqBgCg3g/U
mfQWuhuIHEsEeK7UXC1AvAo=
=wRim
—–END PGP SIGNATURE—–

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://store.mandriva.com
_______________________________________________________