USN-541-1: Emacs vulnerability
Publication date
13 November 2007
Overview
Emacs vulnerability
Releases
Packages
- emacs22 -
Details
Drake Wilson discovered that Emacs did not correctly handle the safe
mode of “enable-local-variables”. If a user were tricked into opening
a specially crafted file while “enable-local-variables” was set to the
non-default ”:safe”, a remote attacker could execute arbitrary commands
with the user’s privileges.
Drake Wilson discovered that Emacs did not correctly handle the safe
mode of “enable-local-variables”. If a user were tricked into opening
a specially crafted file while “enable-local-variables” was set to the
non-default ”:safe”, a remote attacker could execute arbitrary commands
with the user’s privileges.
Update instructions
In general, a standard system upgrade is sufficient to effect the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
Ubuntu Release | Package Version | ||
---|---|---|---|
7.10 gutsy | emacs22 – 22.1-0ubuntu5.1 |
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.