MDVSA-2008:154

Package name
xemacs
Date
2008-07-23
Advisory ID
MDVSA-2008:154
Affected versions
CS3.0 i586 , CS3.0 x86_64

Problem description

A vulnerability in xemacs was found where an attacker could provide
a group of files containing local variable definitions and arbitrary
Lisp code to be executed when one of the provided files is opened by
xemacs (CVE-2008-2142).

The updated packages have been patched to correct this issue.

Updated packages

CS3.0 i586

 e0986da570ec923b469a5f23efdb4538  corporate/3.0/i586/xemacs-21.4.15-5.2.C30mdk.i586.rpm
 3beba91071cfd28058b2e99694fc7726  corporate/3.0/i586/xemacs-devel-21.4.15-5.2.C30mdk.i586.rpm
 7cb5ac450bf9aeeed94bd138bdc82cdb  corporate/3.0/i586/xemacs-el-21.4.15-5.2.C30mdk.i586.rpm
 a5aedca9c3340a6d354376191303e8e1  corporate/3.0/i586/xemacs-extras-21.4.15-5.2.C30mdk.i586.rpm
 c33a8054e1f35ad9c36d60c28d2ae0e7  corporate/3.0/i586/xemacs-packages-21.4.15-5.2.C30mdk.i586.rpm 
 a6dad6c62c77c973ecee89e9f9eb7f32  corporate/3.0/SRPMS/xemacs-21.4.15-5.2.C30mdk.src.rpm

CS3.0 x86_64

 80e20b9c79f16ed724d83a9b4219408d  corporate/3.0/x86_64/xemacs-21.4.15-5.2.C30mdk.x86_64.rpm
 5596fce531b255858ce572883ffa5692  corporate/3.0/x86_64/xemacs-devel-21.4.15-5.2.C30mdk.x86_64.rpm
 f019a4bfb2fee7558ac4edbffa0e5c73  corporate/3.0/x86_64/xemacs-el-21.4.15-5.2.C30mdk.x86_64.rpm
 4a863f88ff3c85a1c10aa1a795b2419e  corporate/3.0/x86_64/xemacs-extras-21.4.15-5.2.C30mdk.x86_64.rpm
 08e1e58a1583ff7298b1eb1001baa751  corporate/3.0/x86_64/xemacs-packages-21.4.15-5.2.C30mdk.x86_64.rpm 
 a6dad6c62c77c973ecee89e9f9eb7f32  corporate/3.0/SRPMS/xemacs-21.4.15-5.2.C30mdk.src.rpm

References