Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 615
Alerts This Week
Warning Icon 1 615

Red Hat Enterprise Linux 2.1 RHSA-2004:464-01 Critical: Shell Escape Threat

red hat
Calendar Grey September 15, 2004
Dist Redhat Esm H88
The newest xy tool resolves command injection risks while recommending Ubuntu users to apply advised patches across multiple environments.
An updated mc package that resolves several shell escape security issues isnow available.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/

5. Bug IDs fixed (http://bugzilla.redhat.com/ for more info):

127974 - CAN-2004-0494 extfs vfs vulnerability in mc

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1:

SRPMS:

afec2c565d6a6ddef751653eebaa3ad6 mc-4.5.51-36.4.src.rpm

i386: 10f69a32fd981ffcb2c018e070ca9b62 mc-4.5.51-36.4.i386.rpm

ia64: 662118226d4084bbe6e67f19f7918af1 mc-4.5.51-36.4.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS:

afec2c565d6a6ddef751653eebaa3ad6 mc-4.5.51-36.4.src.rpm

ia64: 662118226d4084bbe6e67f19f7918af1 mc-4.5.51-36.4.ia64.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS:

afec2c565d6a6ddef751653eebaa3ad6 mc-4.5.51-36.4.src.rpm

i386: 10f69a32fd981ffcb2c018e070ca9b62 mc-4.5.51-36.4.i386.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from


Summary

Topics%20covered

Topics Covered

security advisory security issue update red hat critical mc package shell escape

References

CVE -CVE-2004-0494

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2004:464-01
Issue date: 2004-09-15
Updated on: 2004-09-15
Product: Red Hat Enterprise Linux

Topic

An updated mc package that resolves several shell escape security issues isnow available.

Topics%20covered

Topics Covered

security advisory security issue update red hat critical mc package shell escape

Relevant Releases Architectures

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64

Red Hat Linux Advanced Workstation 2.1 - ia64

Red Hat Enterprise Linux WS version 2.1 - i386

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.