diff options
| author | Chong Yidong | 2010-04-02 11:24:16 -0400 |
|---|---|---|
| committer | Chong Yidong | 2010-04-02 11:24:16 -0400 |
| commit | c8f19d81022a1f17cd14d1553a9c063f4eabe3c2 (patch) | |
| tree | e785f91b914962e7fb8e38553b042903efbfd301 /lib-src/ChangeLog | |
| parent | e4b204d75ff161c1f4823eee5187fd0a64511f60 (diff) | |
| download | emacs-c8f19d81022a1f17cd14d1553a9c063f4eabe3c2.tar.gz emacs-c8f19d81022a1f17cd14d1553a9c063f4eabe3c2.zip | |
Fix permissions handling (CVE-2010-0825).
* movemail.c (main): Check return values of setuid. Avoid
possibility of symlink attack when movemail is setgid mail
(CVE-2010-0825).
Diffstat (limited to 'lib-src/ChangeLog')
| -rw-r--r-- | lib-src/ChangeLog | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/lib-src/ChangeLog b/lib-src/ChangeLog index e97f2672074..826f5c4e6ad 100644 --- a/lib-src/ChangeLog +++ b/lib-src/ChangeLog | |||
| @@ -1,3 +1,9 @@ | |||
| 1 | 2010-04-02 Dan Rosenberg <dan.j.rosenberg@gmail.com> (tiny change) | ||
| 2 | |||
| 3 | * movemail.c (main): Check return values of setuid. Avoid | ||
| 4 | possibility of symlink attack when movemail is setgid mail | ||
| 5 | (CVE-2010-0825). | ||
| 6 | |||
| 1 | 2010-03-19 Tetsurou Okazaki <okazaki@be.to> (tiny change) | 7 | 2010-03-19 Tetsurou Okazaki <okazaki@be.to> (tiny change) |
| 2 | 8 | ||
| 3 | * Makefile.in (uninstall): Handle the case where archlibdir does | 9 | * Makefile.in (uninstall): Handle the case where archlibdir does |