CEDET: Privilege escalation
Gentoo Linux Security Advisory
||GLSA 201401-31 / cedet
||January 27, 2014
||January 27, 2014: 2
All supported architectures
A vulnerability in CEDET could result in privilege escalation.
CEDET is a Collection of Emacs Development Environment Tools written
with the end goal of creating an advanced development environment in
An untrusted search path vulnerability was discovered in CEDET.
A local attacker could escalate his privileges via a specially crafted
Lisp expression in a Project.ede file in the directory or a parent
directory of an opened file.
There is no known workaround at this time.
All CEDET users should upgrade to the latest version:
Code Listing 3.1: Resolution
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emacs/cedet-1.0.1"
NOTE: This is a legacy GLSA. Updates for all affected architectures are
available since February 01, 2012. It is likely that your system is
already no longer affected by this issue.