Debian Security Advisory DSA 003-1 (joe)

Summary
The remote host is missing an update to joe announced via advisory DSA 003-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20003-1
Insight
The security fix for joe released on November 22, 2000 had a problem: it created the DEADJOE file securily but didn't write anything to it. This has been fixed in version 2.8.15.2 . This is the text from the previous advisory: When joe (Joe's Own Editor) dies due to a signal instead of a normal exit it saves a list of the files it is editing to a file called `DEADJOE' in its current directory. Unfortunately this wasn't done safely which made joe vulnerable to a symlink attack.