Lucene search

K
redhatRedHatRHSA-2004:344
HistoryAug 18, 2004 - 12:00 a.m.

(RHSA-2004:344) semi security update

2004-08-1800:00:00
access.redhat.com
9

0.0004 Low

EPSS

Percentile

5.1%

The semi package includes a MIME library for GNU Emacs and XEmacs used by
the wl mail package.

Tatsuya Kinoshita discovered a vulnerability in flim, an emacs library
for working with Internet messages included in the semi package. Temporary
files were being created without taking adequate precautions, and therefore
a local user could potentially overwrite files with the privileges of the
user running emacs. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-0422 to this issue.

Users of semi are advised to upgrade to these packages, which contain
a backported patch fixing this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchsemi-xemacs< 1.14.3-8.72.EL.1semi-xemacs-1.14.3-8.72.EL.1.noarch.rpm
RedHatanynoarchsemi< 1.14.3-8.72.EL.1semi-1.14.3-8.72.EL.1.noarch.rpm

0.0004 Low

EPSS

Percentile

5.1%