Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
91
security advisorygentoocode executionGentoo: GLSA-201006-15 Normal: XEmacs Code Execution Risk
Multiple integer overflow errors in XEmacs might allow remote, user-assisted attackers to execute arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201006-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: XEmacs: User-assisted execution of arbitrary code Date: June 03, 2010 Bugs: #275397 ID: 201006-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple integer overflow errors in XEmacs might allow remote, user-assisted attackers to execute arbitrary code. Background ========= XEmacs is a highly extensible and customizable text editor. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-editors/xemacs < 21.4.22-r1 > = 21.4.22-r1 Description ========== Tielei Wang reported multiple integer overflow vulnerabilities in the tiff_instantiate(), png_instantiate() and jpeg_instantiate() functions in glyphs-eimage.c, all possibly leading to heap-based buffer overflows. Impact ===== A remote attacker could entice a user to open a specially crafted TIFF, JPEG or PNG file using XEmacs, possibly resulting in the remote execution of arbitrary code with the privileges of the user running the application, or a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All XEmacs users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-editors/xemacs-21.4.22-r1" NOTE: This is a legacy GLSA. Updates for all affectedarchitectures are available since July 26, 2009. It is likely that your system is already no longer affected by this issue. References ========= [ 1 ] CVE-2009-2688 https://www.cve.org/CVERecord?id=CVE-2009-2688 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201006-15 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Jun 03, 2010
Gentoo
91
security advisorygentoocode executionGentoo: 200902-06 Advisory: Emacs Code Execution Vulnerability Risk
Two vulnerabilities were found in GNU Emacs, possibly leading to user-assisted execution of arbitrary code. One also affects edit-utils in XEmacs. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200902-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: GNU Emacs, XEmacs: Multiple vulnerabilities Date: February 23, 2009 Bugs: #221197, #236498 ID: 200902-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Two vulnerabilities were found in GNU Emacs, possibly leading to user-assisted execution of arbitrary code. One also affects edit-utils in XEmacs. Background ========= GNU Emacs and XEmacs are highly extensible and customizable text editors. edit-utils are miscellaneous extensions to XEmacs. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-editors/emacs < 22.2-r3 > = 22.2-r3 *> = 21.4-r17 < 19 2 app-xemacs/edit-utils < 2.39 > = 2.39 ------------------------------------------------------------------- 2 affected packages on all of their supported architectures. ------------------------------------------------------------------- Description ========== Morten Welinder reports about GNU Emacs and edit-utils in XEmacs: By shipping a .flc accompanying a source file (.c for example) and setting font-lock-support-mode to fast-lock-mode in the source filethrough local variables, any Lisp code in the .flc file is executed without warning (CVE-2008-2142). Romain Francoise reported a security risk in a feature of GNU Emacs related to interacting with Python. The vulnerability arises because Python, by default, prepends the current directory to the module search path, allowing for arbitrary code execution when launched from a specially crafted directory (CVE-2008-3949). Impact ===== Remote attackers could entice a user to open a specially crafted file in GNU Emacs, possibly leading to the execution of arbitrary Emacs Lisp code or arbitrary Python code with the privileges of the user running GNU Emacs or XEmacs. Workaround ========= There is no known workaround at this time. Resolution ========= All GNU Emacs users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-editors/emacs-22.2-r3" All edit-utils users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-xemacs/edit-utils-2.39" References ========= [ 1 ] CVE-2008-2142 https://www.cve.org/CVERecord?id=CVE-2008-2142 [ 2 ] CVE-2008-3949 https://www.cve.org/CVERecord?id=CVE-2008-3949 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200902-06 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Feb 23, 2009
Gentoo
98
security advisorysecurity updatered hatRed Hat: RHSA-2005:133-01 Important: XEmacs Code Execution Risk
Updated XEmacs packages that fix a string format issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team.. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Important: xemacs security update Advisory ID: RHSA-2005:133-01 Advisory URL: https://access.redhat.com/errata/RHSA-2005:133.html Issue date: 2005-02-15 Updated on: 2005-02-15 Product: Red Hat Enterprise Linux CVE Names: CAN-2005-0100 - ---------------------------------------------------------------------1. Summary: Updated XEmacs packages that fix a string format issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Problem description: XEmacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemail utility of XEmacs. If a user connects to a malicious POP server, an attacker can execute arbitrary code as the user running xemacs. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-0100 to this issue. Users of XEmacs are advised to upgrade to these updated packages, which contain backported patches to correct this issue. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use thefollowing command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/ 5. Bug IDs fixed (http://bugzilla.redhat.com/): 146706 - CAN-2005-0100 Arbitrary code execution in *emacs* 6. RPMs required: Red Hat Enterprise Linux AS version 4: SRPMS: 3578571b8fbfa877446ff2bf2aba4d33 xemacs-21.4.15-10.EL.1.src.rpm i386: 32769fed540b952fa0b13099656c99df xemacs-21.4.15-10.EL.1.i386.rpm 7ea9196d920a918309f882b4ec36daff xemacs-common-21.4.15-10.EL.1.i386.rpm 28a03178e6cda6a0f9ae41a63cf604ce xemacs-el-21.4.15-10.EL.1.i386.rpm 7edc52f8b80c8c108bc8144736a758be xemacs-info-21.4.15-10.EL.1.i386.rpm 7adf376bc1a202d1509c39e17b6ca47d xemacs-nox-21.4.15-10.EL.1.i386.rpm ia64: 5da6d5f42eaf911e2d3531dd6bb3a438 xemacs-21.4.15-10.EL.1.ia64.rpm 0d62c335e2dd1f2b97f6d7700882ce73 xemacs-common-21.4.15-10.EL.1.ia64.rpm 6a55af1abbe00a4ff5fc8bea3f8f362b xemacs-el-21.4.15-10.EL.1.ia64.rpm b014369cff4e33efb41d2e1926f1ebe6 xemacs-info-21.4.15-10.EL.1.ia64.rpm 170a29a6e539d290a8a1e0a4aa04f80a xemacs-nox-21.4.15-10.EL.1.ia64.rpm ppc: 604b838be1c70f78a069838aedd3583f xemacs-21.4.15-10.EL.1.ppc.rpm 19ca8f80d9150c61a4e4532003caa40a xemacs-common-21.4.15-10.EL.1.ppc.rpm 98623c7463fa2f35562a7bac89f24a59 xemacs-el-21.4.15-10.EL.1.ppc.rpm 659cf3c867f3c1089936c0eae8646995 xemacs-info-21.4.15-10.EL.1.ppc.rpm ce04905c75b1c1b4e250ec64b646c088 xemacs-nox-21.4.15-10.EL.1.ppc.rpm s390: 67c1e30c3da90c9f929a0454cda90480 xemacs-21.4.15-10.EL.1.s390.rpm 87f1b473112c1417e3e5005898aeaba7 xemacs-common-21.4.15-10.EL.1.s390.rpm 62b74ac3cc227f94c7385616e6e98bb9 xemacs-el-21.4.15-10.EL.1.s390.rpm 931788a7c98b15bf3971f512e74f6c9a xemacs-info-21.4.15-10.EL.1.s390.rpm 1c4fc34a77f266dd46036f28f2355552 xemacs-nox-21.4.15-10.EL.1.s390.rpm s390x: 43e7f05b16a56833fba58286f84aff3a xemacs-21.4.15-10.EL.1.s390x.rpm 9d5ab2fcf69ede7e50beca7d057c364e xemacs-common-21.4.15-10.EL.1.s390x.rpm 705516d8db6bfae82a7c600db243a55e xemacs-el-21.4.15-10.EL.1.s390x.rpm 0d10cc5bb25fcf0e7f8a135c5d59dfb9 xemacs-info-21.4.15-10.EL.1.s390x.rpm 0f2a83207bd62d69ad51e35c8ba7713a xemacs-nox-21.4.15-10.EL.1.s390x.rpm x86_64: 60675f3441482c33d304cb6ba1c055fc xemacs-21.4.15-10.EL.1.x86_64.rpm 625de01c2f5f6385597ce95fb636a88b xemacs-common-21.4.15-10.EL.1.x86_64.rpm 3dcd4dabcf9e7967ff381f74f8a55804 xemacs-el-21.4.15-10.EL.1.x86_64.rpm 2b0b2d67309d87609dd1d3e7d0cd457f xemacs-info-21.4.15-10.EL.1.x86_64.rpm 2ba03342b10f3002db64e4247eab39e2 xemacs-nox-21.4.15-10.EL.1.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: SRPMS: 3578571b8fbfa877446ff2bf2aba4d33 xemacs-21.4.15-10.EL.1.src.rpm i386: 32769fed540b952fa0b13099656c99df xemacs-21.4.15-10.EL.1.i386.rpm 7ea9196d920a918309f882b4ec36daff xemacs-common-21.4.15-10.EL.1.i386.rpm 28a03178e6cda6a0f9ae41a63cf604ce xemacs-el-21.4.15-10.EL.1.i386.rpm 7edc52f8b80c8c108bc8144736a758be xemacs-info-21.4.15-10.EL.1.i386.rpm 7adf376bc1a202d1509c39e17b6ca47d xemacs-nox-21.4.15-10.EL.1.i386.rpm x86_64: 60675f3441482c33d304cb6ba1c055fc xemacs-21.4.15-10.EL.1.x86_64.rpm 625de01c2f5f6385597ce95fb636a88b xemacs-common-21.4.15-10.EL.1.x86_64.rpm 3dcd4dabcf9e7967ff381f74f8a55804 xemacs-el-21.4.15-10.EL.1.x86_64.rpm 2b0b2d67309d87609dd1d3e7d0cd457f xemacs-info-21.4.15-10.EL.1.x86_64.rpm 2ba03342b10f3002db64e4247eab39e2 xemacs-nox-21.4.15-10.EL.1.x86_64.rpm Red Hat Enterprise Linux ES version 4: SRPMS: 3578571b8fbfa877446ff2bf2aba4d33 xemacs-21.4.15-10.EL.1.src.rpm i386: 32769fed540b952fa0b13099656c99df xemacs-21.4.15-10.EL.1.i386.rpm 7ea9196d920a918309f882b4ec36daff xemacs-common-21.4.15-10.EL.1.i386.rpm 28a03178e6cda6a0f9ae41a63cf604ce xemacs-el-21.4.15-10.EL.1.i386.rpm 7edc52f8b80c8c108bc8144736a758be xemacs-info-21.4.15-10.EL.1.i386.rpm 7adf376bc1a202d1509c39e17b6ca47d xemacs-nox-21.4.15-10.EL.1.i386.rpm ia64: 5da6d5f42eaf911e2d3531dd6bb3a438 xemacs-21.4.15-10.EL.1.ia64.rpm 0d62c335e2dd1f2b97f6d7700882ce73 xemacs-common-21.4.15-10.EL.1.ia64.rpm 6a55af1abbe00a4ff5fc8bea3f8f362b xemacs-el-21.4.15-10.EL.1.ia64.rpm b014369cff4e33efb41d2e1926f1ebe6 xemacs-info-21.4.15-10.EL.1.ia64.rpm 170a29a6e539d290a8a1e0a4aa04f80a xemacs-nox-21.4.15-10.EL.1.ia64.rpm x86_64: 60675f3441482c33d304cb6ba1c055fc xemacs-21.4.15-10.EL.1.x86_64.rpm 625de01c2f5f6385597ce95fb636a88b xemacs-common-21.4.15-10.EL.1.x86_64.rpm 3dcd4dabcf9e7967ff381f74f8a55804 xemacs-el-21.4.15-10.EL.1.x86_64.rpm 2b0b2d67309d87609dd1d3e7d0cd457f xemacs-info-21.4.15-10.EL.1.x86_64.rpm 2ba03342b10f3002db64e4247eab39e2 xemacs-nox-21.4.15-10.EL.1.x86_64.rpm Red Hat Enterprise Linux WS version 4: SRPMS: 3578571b8fbfa877446ff2bf2aba4d33 xemacs-21.4.15-10.EL.1.src.rpm i386: 32769fed540b952fa0b13099656c99df xemacs-21.4.15-10.EL.1.i386.rpm 7ea9196d920a918309f882b4ec36daff xemacs-common-21.4.15-10.EL.1.i386.rpm 28a03178e6cda6a0f9ae41a63cf604ce xemacs-el-21.4.15-10.EL.1.i386.rpm 7edc52f8b80c8c108bc8144736a758be xemacs-info-21.4.15-10.EL.1.i386.rpm 7adf376bc1a202d1509c39e17b6ca47d xemacs-nox-21.4.15-10.EL.1.i386.rpm ia64: 5da6d5f42eaf911e2d3531dd6bb3a438 xemacs-21.4.15-10.EL.1.ia64.rpm 0d62c335e2dd1f2b97f6d7700882ce73 xemacs-common-21.4.15-10.EL.1.ia64.rpm 6a55af1abbe00a4ff5fc8bea3f8f362b xemacs-el-21.4.15-10.EL.1.ia64.rpm b014369cff4e33efb41d2e1926f1ebe6 xemacs-info-21.4.15-10.EL.1.ia64.rpm 170a29a6e539d290a8a1e0a4aa04f80a xemacs-nox-21.4.15-10.EL.1.ia64.rpm x86_64: 60675f3441482c33d304cb6ba1c055fc xemacs-21.4.15-10.EL.1.x86_64.rpm 625de01c2f5f6385597ce95fb636a88b xemacs-common-21.4.15-10.EL.1.x86_64.rpm 3dcd4dabcf9e7967ff381f74f8a55804 xemacs-el-21.4.15-10.EL.1.x86_64.rpm 2b0b2d67309d87609dd1d3e7d0cd457f xemacs-info-21.4.15-10.EL.1.x86_64.rpm 2ba03342b10f3002db64e4247eab39e2 xemacs-nox-21.4.15-10.EL.1.x86_64.rpm These packages are GPG signed by Red Hat forsecurity. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CAN-2005-0100 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2005 Red Hat, Inc. . Crucial XEmacs patch for CentOS addresses character encoding bug with potential security risks.. XEmacs Security Update, Red Hat Code Execution, XEmacs Risk Mitigation. . Severity: Important. LinuxSecurity.com Team
Feb 15, 2005
•Important
Red Hat
89
security advisorymoderatefedoraFedora: FEDORA-2005-145 Moderate: XEmacs Movemail Format Issue
Update to 21.4.17 stable release, which also fixes the CAN-2005-0100 movemail string format vulnerability.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-145 2005-02-14 ---------------------------------------------------------------------Product : Fedora Core 2 Name : xemacs Version : 21.4.17 Release : 0.FC2 Summary : A different version of Emacs. Description : XEmacs is a highly customizable open source text editor and application development system. It is protected under the GNU Public License and related to other versions of Emacs, in particular GNU Emacs. Its emphasis is on modern graphical user interface support and an open software development model, similar to Linux. This package contains xemacs built for X Windows with MULE support. ---------------------------------------------------------------------Update Information: Update to 21.4.17 stable release, which also fixes the CAN-2005-0100 movemail string format vulnerability. ---------------------------------------------------------------------* Mon Feb 7 2005 Jens Petersen - update to 21.4.17 - fixes movemail format string vulnerability (CAN-2005-0100, 146705) - xemacs-21.4.16-xutil-keysym-144601.patch no longer needed * Tue Jan 25 2005 Jens Petersen - 21.4.16-2 - workaround xorg-x11 issue with iso-level3-shift (Ville Skyttä, 144601) * Mon Dec 13 2004 Jens Petersen - 21.4.16-1 - update to new stable release - no longer need configure-ppc-ldscript.patch and xemacs-21.4.15-pui-120437.patch - default to unified diff in .xemacs/init.el * Thu Nov 18 2004 Jens Petersen - 21.4.15-10 - show xemacs again in the desktop menu (132567) * Mon Oct 18 2004 Jens Petersen - 21.4.15-9 - fix etag alternatives removal when uninstalling (Karsten Hopp, 136137) * Wed Oct 6 2004 Jens Petersen - xemacs-el no longer requires xemacs for -nox users (Lars Hupfeldt Nielsen, 134479) * Thu Sep 302004 Jens Petersen - 21.4.15-8 - cleanup and update .desktop file - make xemacs not appear in the desktop menu (Seth Nickell,132567) - move the desktop file from -common to main package - etags is now handled by alternatives (92256) - no longer require ctags - turn back on wnn support and add xemacs-21.4.15-wnnfix-128362.patch (Yukihiro Nakai, 128362) * Tue Jun 15 2004 Elliot Lee - rebuilt * Mon Jun 7 2004 Jens Petersen - 21.4.15-6 - don't link with -export-dynamic on ia64 to stop dumped function pointers from breaking (Roland McGrath & Jakub Jelinek, #106744) - disable dynamic module support on ia64 - change the xemacs-info uninstall script from %postun to %preun and move the post/preun install-info requires to xemacs-info - simplify coding-system setup somewhat in site-start.el - fix up the desktop file (Ville Skyttä, 123135) - xemacs-nox now requires xemacs-sumo - build without xfs since it seems to cause some problem with fonts missing * Wed May 5 2004 Jens Petersen - move install-info requirement to xemacs-info - drop unnecessary Canna-libs requirement ---------------------------------------------------------------------This update can be downloaded from: d97d1380dba413cbddedda2fa141394a SRPMS/xemacs-21.4.17-0.FC2.src.rpm 303906a89774a0bd34d84354859264c6 x86_64/xemacs-21.4.17-0.FC2.x86_64.rpm 104f72f402d2e83af7a6c067c9d37333 x86_64/xemacs-common-21.4.17-0.FC2.x86_64.rpm 0c90a50234004203cfe7e97c3d08ca8d x86_64/xemacs-nox-21.4.17-0.FC2.x86_64.rpm 07f12cb446ffa6c92aada9b2a3411680 x86_64/xemacs-el-21.4.17-0.FC2.x86_64.rpm 9cd30580fc3b572a0bd7defe19d3fa6b x86_64/xemacs-info-21.4.17-0.FC2.x86_64.rpm 18a67f26082b215599a07f2818bd434a x86_64/debug/xemacs-debuginfo-21.4.17-0.FC2.x86_64.rpm 3c01ec4518483f5c39e1fefb7a896d60 i386/xemacs-21.4.17-0.FC2.i386.rpm e640edccfe9d85c6d78b73ab00843662 i386/xemacs-common-21.4.17-0.FC2.i386.rpm bbbef68286645419681a3e5625532d29 i386/xemacs-nox-21.4.17-0.FC2.i386.rpm 68f22b910cefcc42bc020e3331721661 i386/xemacs-el-21.4.17-0.FC2.i386.rpm 2a3bb0839ad8c3a0c173b5791cba6b8d i386/xemacs-info-21.4.17-0.FC2.i386.rpm 69fef3ec6d429bc548a2c602b0a919be i386/debug/xemacs-debuginfo-21.4.17-0.FC2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- --------------enig9404029E17EA88AA57787F95 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE-----Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - iD8DBQFCEX8e8SXyPe8n7dERAiXFAJ9XQFuZ7cNbZKJrlouuqomX5iFdmACfXqQw gu8f/zjzjca00TfoeeUzPNU=IPht -----END PGP SIGNATURE-------------------enig9404029E17EA88AA57787F95-- --===============1329973991=Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --fedora-announce-list mailing list
Feb 15, 2005
Fedora
87
security advisorycriticalremote code executionDebian: DSA 671-1 Important: XEmacs Format String Vulnerability
Updated xemacs package.. - --------------------------------------------------------------------------Debian Security Advisory DSA 671-1
Feb 08, 2005
•Important
Debian
87
security advisorybuffer overflowdebianDebian: DSA-042-1 Critical: Gnuserv Buffer Overflow Threat
Klaus Frank has found a vulnerability in the way gnuserv handled remote connections.. ---------------------------------------------------------------------------- Debian Security Advisory DSA-042-1
Mar 09, 2001
•Critical
Debian
98
security advisorybuffer overflowcriticalRed Hat Powertools 6.2 RHSA-2001:011-03 Critical: XEmacs Buffer Overflow
The XEmacs package as shipped with Red Hat PowerTools 6.2 has a securityproblem with gnuserv and gnuclient, due to a buffer overflow and weaksecurity.. ` --------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated XEmacs packages available for Red Hat Powertools 6.2 Advisory ID: RHSA-2001:011-03 Issue date: 2001-02-02 Updated on: 2001-02-06 Product: Red Hat Powertools Keywords: xemacs gnuserv gnuclient Cross references: Obsoletes: --------------------------------------------------------------------- 1. Topic: 2. Relevant releases/architectures: Red Hat Powertools 6.2 - alpha, i386, sparc 3. Problem description: The XEmacs package as shipped with Red Hat PowerTools 6.2 has a security problem with gnuserv and gnuclient, due to a buffer overflow and weak security. Note that this package obsoletes xemacs-mule (this is now compiled into the main binary), xemacs-static, xemacs-extras and xemacs-noX, as this is a backport of a newer xemacs package. 4. Solution: To update all RPMs for your particular architecture, run: rpm -Fvh where is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed ( for more info): 6. RPMs required: Red Hat Powertools 6.2: alpha: i386: sparc: 7. Verification: MD5 sum PackageName -------------------------------------------------------------------------- 963901255ab8377baf92bcc8f3ec30b3 6.2/alpha/xemacs-21.1.14-2.62.alpha.rpm c1fa617399ff85af31c5d31e314249a8 6.2/alpha/xemacs-el-21.1.14-2.62.alpha.rpm e190d32da1a92132d53ee734a93b43cb 6.2/alpha/xemacs-info-21.1.14-2.62.alpha.rpm 661aae1be3097c403df3d38eb5f6ae80 6.2/i386/xemacs-21.1.14-2.62.i386.rpm 03fab61adb2f874f95dfc895e1ede878 6.2/i386/xemacs-el-21.1.14-2.62.i386.rpm bae82e4622a0b4b810eaa690446442b5 6.2/i386/xemacs-info-21.1.14-2.62.i386.rpm 5c4a36734b54ebd3be33e9404bbcb8e6 6.2/sparc/xemacs-21.1.14-2.62.sparc.rpm ef99cb1d6d1d2a0f90f034d4a3a0697f 6.2/sparc/xemacs-el-21.1.14-2.62.sparc.rpm e4a34278881cc1ec29f817bbcfc8f52b 6.2/sparc/xemacs-info-21.1.14-2.62.sparc.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: Copyright(c) 2000, 2001 Red Hat, Inc. `. Updated XEmacs patches for Red Hat Powertools 6.2 released to address critical buffer overflow vulnerabilities. Apply patches without delay!. XEmacs Security, Package Update, Buffer Overflow. . Severity: Critical. LinuxSecurity.com Team
Feb 06, 2001
•Critical
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!