Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 517
Alerts This Week
Warning Icon 1 517

CentOS Security Advisory: CESA-2023:4567-01 Urgent: CGI Script Exploit

red hat
Calendar Grey August 19, 2004
Dist Redhat Esm H88
Boost your Emacs proficiency on RHEL by refining semi package settings, implementing strict file management, adjusting backup options, and guiding users to avoid unintentional file overwrites
Temporary files were being created without taking adequate precautions, and therefore a local user could potentially overwrite files with the privileges of the user running emacs.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/


5. Bug IDs fixed (http://bugzilla.redhat.com/ for more info):

124396 - CAN-2004-0422 flim temporary file vulnerability affects semi packages

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1:

SRPMS:

dfcfc66f790902402b72eedd3a806284 semi-1.14.3-8.72.EL.1.src.rpm

noarch: 23c1b96f8d9fc3d3aefa21812adbd5a1 semi-1.14.3-8.72.EL.1.noarch.rpm 2e5dc06d5aadf594ae7222706e230e0e semi-xemacs-1.14.3-8.72.EL.1.noarch.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS:

dfcfc66f790902402b72eedd3a806284 semi-1.14.3-8.72.EL.1.src.rpm

noarch: 23c1b96f8d9fc3d3aefa21812adbd5a1 semi-1.14.3-8.72.EL.1.noarch.rpm 2e5dc06d5aadf594ae7222706e230e0e semi-xemacs-1.14.3-8.72.EL.1.noarch.rpm

Red Hat Enterprise Linux ES version 2.1:

SRPMS:

dfcfc66f790902402b72eedd3a806284 semi-1.14.3-8.72.EL.1.src.rpm

noarch: 23c1b96f8d9fc3d3aefa21812adbd5a1 semi-1.14.3-8.72.EL.1.noarch.rpm 2e5dc06d5aadf594ae7222706e230e0e semi-xemacs-1.14.3-8.72.EL.1.noarch.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS:

dfcfc66f790902402b72eedd3a806284 semi-1.14.3-8.72.EL.1.src.rpm

noarch: 23c1b96f8d9fc3d3aefa21812adbd5a1 semi-1.14.3-8.72.EL.1.noarch.rpm 2e5dc06d5aadf594ae7222706e230e0e semi-xemacs-1.14.3-8.72.EL.1.noarch.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from


Summary

Topics%20covered

Topics Covered

security advisory file overwrite Red Hat Enterprise Linux temporary files emacs semi package patch update

References

Debian -- Security Information -- DSA-500-1 flim CVE -CVE-2004-0422

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2004:344-01
Issue date: 2004-08-18
Updated on: 2004-08-18
Product: Red Hat Enterprise Linux

Topic

Updated semi packages that fix vulnerabilities in flim temporary filehandling are now available.

Topics%20covered

Topics Covered

security advisory file overwrite Red Hat Enterprise Linux temporary files emacs semi package patch update

Relevant Releases Architectures

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - noarch

Red Hat Linux Advanced Workstation 2.1 - noarch

Red Hat Enterprise Linux ES version 2.1 - noarch

Red Hat Enterprise Linux WS version 2.1 - noarch

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.