Mandriva- Advisories MDVSA-2008:096: Updated emacs packages fix vulnerability in vcdiff

[Mandriva]

Advisories MDVSA-2008:096: Updated emacs packages fix vulnerability in vcdiff
Steve Grubb found that the vcdiff script in Emacs create temporary
files insecurely when used with SCCS. A local user could exploit a
race condition to create or overwrite files with the privileges of
the user invoking the program (CVE-2008-1694).

The updated packages have been patched to correct this issue.
http://mandrivausers.org/index.php?showtopic=57764
http://mandrivausers.org/index.php?showtopic=57764
Wed, 07 May 2008 00:14:26 +0000