CVE:CVE-2014-2524
CNNVD:CNNVD-201406-639
GNU Readline是美国软件开发者Chet Ramey所负责维护的一个开源的跨平台程序库，它提供了交互式的文本编辑功能，且支持命令行方式进行编辑。
GNU readline 6.3 patch 3之前版本中util.c文件的‘_rl_tropen’函数中存在安全漏洞。本地攻击者可通过在a/var/tmp/rltrace.[PID]文件中实施符号链接攻击利用该漏洞创建或覆盖任意文件。
solution:Upgrade mageia mageia to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade gnu readline to a higher version than 6.3,2.1,2.2,4.0,4.1,4.2,4.2:a,4.3,5.0,5.1,5.2,6.0,6.1,6.2,and avoid the version (,6.3],2.1,2.2,4.0,4.1,4.2,4.2:a,4.3,5.0,5.1,5.2,6.0,6.1,6.2; Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1; Upgrade fedoraproject fedora to a higher version than 20,and avoid the version 20