Description
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | xemacs21 | 21.4.21-4 | — |
References
- USN-607-1 vendor-advisory
- 29905 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=208483
- MDVSA-2008:096 vendor-advisory
- ADV-2008-1309 vdb-entry
- 1019909 vdb-entry
- 29926 third-party-advisory
- 30109 third-party-advisory
- xemacs-gnuemacs-vcdiff-symlink(41906) vdb-entry
- 28857 vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=216880
- ADV-2008-1310 vdb-entry