Test Kennung:	1.3.6.1.4.1.25623.1.0.71990
Kategorie:	Slackware Local Security Checks
Titel:	Slackware: Security Advisory (SSA:2012-228-02)
Zusammenfassung:	The remote host is missing an update for the 'emacs' package(s) announced via the SSA:2012-228-02 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'emacs' package(s) announced via the SSA:2012-228-02 advisory. Vulnerability Insight: New emacs packages are available for Slackware 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+ patches/packages/emacs-23.3-i486-2_slack13.37.txz: Rebuilt. Patched to fix a security flaw in the file-local variables code. When the Emacs user option `enable-local-variables' is set to `:safe' (the default value is t), Emacs should automatically refuse to evaluate `eval' forms in file-local variable sections. Due to the bug, Emacs instead automatically evaluates such `eval' forms. Thus, if the user changes the value of `enable-local-variables' to `:safe', visiting a malicious file can cause automatic execution of arbitrary Emacs Lisp code with the permissions of the user. Bug discovered by Paul Ling. For more information, see: [link moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'emacs' package(s) on Slackware 13.1, Slackware 13.37, Slackware current. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3479 1027375 http://www.securitytracker.com/id?1027375 50157 http://secunia.com/advisories/50157 50801 http://secunia.com/advisories/50801 54969 http://www.securityfocus.com/bid/54969 DSA-2603 http://www.debian.org/security/2013/dsa-2603 MDVSA-2013:076 http://www.mandriva.com/security/advisories?name=MDVSA-2013:076 SSA:2012-228-02 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.420006 USN-1586-1 http://www.ubuntu.com/usn/USN-1586-1 [oss-security] 20120812 Re: Security flaw in GNU Emacs file-local variables http://www.openwall.com/lists/oss-security/2012/08/13/2 [oss-security] 20120813 Security flaw in GNU Emacs file-local variables http://www.openwall.com/lists/oss-security/2012/08/13/1 http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155 openSUSE-SU-2012:1348 http://lists.opensuse.org/opensuse-updates/2012-10/msg00057.html
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.