Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Critical Update for Red Hat Enterprise Linux 3: Enscript Command Issue

red hat
Calendar Grey February 1, 2005
Dist Redhat Esm H88
New version of the enscript software now available for Red Hat, addressing major security flaws associated with command execution risks.
An updated enscript package that fixes several security issues is now available.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/

5. Bug IDs fixed (http://bugzilla.redhat.com/):

144683 - CAN-2004-1184 multiple security issues in enscript (CAN-2004-1185 CAN-2004-1186)

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1:

SRPMS: 8e405e471e4419319c6ac65c80d02d5c enscript-1.6.1-16.5.src.rpm

i386: 9f3d90e1f1d723669b77f7f814f15923 enscript-1.6.1-16.5.i386.rpm

ia64: 872542b1728ba95a680a703fd49b88ab enscript-1.6.1-16.5.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS: 8e405e471e4419319c6ac65c80d02d5c enscript-1.6.1-16.5.src.rpm

ia64: 872542b1728ba95a680a703fd49b88ab enscript-1.6.1-16.5.ia64.rpm

Red Hat Enterprise Linux ES version 2.1:

SRPMS: 8e405e471e4419319c6ac65c80d02d5c enscript-1.6.1-16.5.src.rpm

i386: 9f3d90e1f1d723669b77f7f814f15923 enscript-1.6.1-16.5.i386.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS: 8e405e471e4419319c6ac65c80d02d5c enscript-1.6.1-16.5.src.rpm

i386: 9f3d90e1f1d723669b77f7f814f15923 enscript-1.6.1-16.5.i386.rpm

Red Hat Enterprise Linux AS version 3:

SRPMS: 25774a6b655e1b1b1647b5b45a70ddee enscript-1.6.1-24.4.src.rpm

i386: 8396407a881a05c9a139a1d324f179f8 enscript-1.6.1-24.4.i386.rpm

ia64: 93bfe25753b73dbcaa8390a82671cf09 enscript-1.6.1-24.4.ia64.rpm

ppc: 3ca7dfe2d1b9525000c5483c697de3e1 enscript-1.6.1-24.4.ppc.rpm

s390: b54d139ecc5862c27517afa75adcc376 enscript-1.6.1-24.4.s390.rpm

s390x: 069ca11ef416ffd0914bd72fba54cbdb enscript-1.6.1-24.4.s390x.rpm

x86_64: abc897af6cc5379b87964c7d03d3ad8f enscript-1.6.1-24.4.x86_64.rpm

Red Hat Desktop version 3:

SRPMS: 25774a6b655e1b1b1647b5b45a70ddee enscript-1.6.1-24.4.src.rpm

i386: 8396407a881a05c9a139a1d324f179f8 enscript-1.6.1-24.4.i386.rpm

x86_64: abc897af6cc5379b87964c7d03d3ad8f enscript-1.6.1-24.4.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS: 25774a6b655e1b1b1647b5b45a70ddee enscript-1.6.1-24.4.src.rpm

i386: 8396407a881a05c9a139a1d324f179f8 enscript-1.6.1-24.4.i386.rpm

ia64: 93bfe25753b73dbcaa8390a82671cf09 enscript-1.6.1-24.4.ia64.rpm

x86_64: abc897af6cc5379b87964c7d03d3ad8f enscript-1.6.1-24.4.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS: 25774a6b655e1b1b1647b5b45a70ddee enscript-1.6.1-24.4.src.rpm

i386: 8396407a881a05c9a139a1d324f179f8 enscript-1.6.1-24.4.i386.rpm

ia64: 93bfe25753b73dbcaa8390a82671cf09 enscript-1.6.1-24.4.ia64.rpm

x86_64: abc897af6cc5379b87964c7d03d3ad8f enscript-1.6.1-24.4.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package

Summary

Topics%20covered

Topics Covered

security advisory security issue update critical command execution enscript Red Hat Enterprise Linux

References

https://www.cve.org/CVERecord?id=CAN-2004-1184 https://www.cve.org/CVERecord?id=CAN-2004-1185 https://www.cve.org/CVERecord?id=CAN-2004-1186

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2005:039-01
Advisory URL: https://access.redhat.com/errata/RHSA-2005:039.html
Issue date: 2005-02-01
Updated on: 2005-02-01
Product: Red Hat Enterprise Linux

Topic

Topics%20covered

Topics Covered

security advisory security issue update critical command execution enscript Red Hat Enterprise Linux

Relevant Releases Architectures

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64

Red Hat Linux Advanced Workstation 2.1 - ia64

Red Hat Enterprise Linux ES version 2.1 - i386

Red Hat Enterprise Linux WS version 2.1 - i386

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64

Red Hat Desktop version 3 - i386, x86_64

Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64

Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here