Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=87291a30a9471adf406005b3775251818c42e4ae
commit 87291a30a9471adf406005b3775251818c42e4ae Author: Miklos Vajna <[EMAIL PROTECTED]> Date: Fri Jun 13 16:00:34 2008 +0200 FSA466-rxvt diff --git a/frugalware/xml/security.xml b/frugalware/xml/security.xml index c238862..1f0235c 100644 --- a/frugalware/xml/security.xml +++ b/frugalware/xml/security.xml @@ -26,6 +26,17 @@ <fsas> <fsa> + <id>466</id> + <date>2008-06-13</date> + <package>rxvt</package> + <vulnerable>2.6.4-2</vulnerable> + <unaffected>2.7.10-1kalgan1</unaffected> + <bts>http://bugs.frugalware.org/task/2925</bts> + <cve>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1142</cve> + <desc>Bernhard R. Link has reported a security issue in rxvt, which can be exploited by malicious, local users to gain escalated privileges. + The security issue is caused due to the program using ":0" as it's X11 display if the DISPLAY environment variable is missing. This can be exploited to execute arbitrary commands with the privileges of the user running rxvt via a malicious X server.</desc> + </fsa> + <fsa> <id>465</id> <date>2008-06-10</date> <package>net-snmp</package> _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
