Articles / Red Hat: Updated xemacs pac…

Red Hat: Updated xemacs packages fix security issue

XEmacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemail utility of XEmacs. If a user connects to a malicious POP server, an attacker can execute arbitrary code as the user running xemacs. Fixed packages are available from updates.redhat.com.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ---------------------------------------------------------------------
                   Red Hat Security Advisory

Synopsis:          Updated xemacs packages fix security issue
Advisory ID:       RHSA-2005:134-01
Advisory URL:      https://rhn.redhat.com/errata/RHSA-2005-134.html
Issue date:        2005-02-10
Updated on:        2005-02-10
Product:           Red Hat Enterprise Linux
CVE Names:         CAN-2005-0100
- ---------------------------------------------------------------------

1. Summary:

Updated XEmacs packages that fix a string format issue are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

3. Problem description:

XEmacs is a powerful, customizable, self-documenting, modeless text editor.

Max Vozeler discovered several format string vulnerabilities in the
movemail utility of XEmacs. If a user connects to a malicious POP server, an
attacker can execute arbitrary code as the user running xemacs. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0100 to this issue.

Users of XEmacs are advised to upgrade to these updated packages, which
contain backported patches to correct this issue.

4. Solution:

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.  Use Red Hat
Network to download and update your packages.  To launch the Red Hat
Update Agent, use the following command:

    up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

    http://www.redhat.com/docs/manuals/enterprise/

5. Bug IDs fixed (http://bugzilla.redhat.com/):

146704 - CAN-2005-0100 Arbitrary code execution in *emacs*

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1AS/en/os/SRPMS/xemacs-21.4.6-6.9.1.src.rpm
4d31836bc71ca0e31ffdcd2601699d85  xemacs-21.4.6-6.9.1.src.rpm

i386:
9b918791022dbd365d1c2ffc7487ad37  xemacs-21.4.6-6.9.1.i386.rpm
e951c1189a2098befdb5f3e7c7806e38  xemacs-el-21.4.6-6.9.1.i386.rpm
0ae98221a5979e4d22c6c5a82ec88682  xemacs-info-21.4.6-6.9.1.i386.rpm

ia64:
f4ef0907a0a8b648307095916e59e5e2  xemacs-21.4.6-6.9.1.ia64.rpm
165bffd4faf333bef4d6f1c9d1be28f4  xemacs-el-21.4.6-6.9.1.ia64.rpm
42fdb40e2f69005f5d574e633c889ca7  xemacs-info-21.4.6-6.9.1.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1AW/en/os/SRPMS/xemacs-21.4.6-6.9.1.src.rpm
4d31836bc71ca0e31ffdcd2601699d85  xemacs-21.4.6-6.9.1.src.rpm

ia64:
f4ef0907a0a8b648307095916e59e5e2  xemacs-21.4.6-6.9.1.ia64.rpm
165bffd4faf333bef4d6f1c9d1be28f4  xemacs-el-21.4.6-6.9.1.ia64.rpm
42fdb40e2f69005f5d574e633c889ca7  xemacs-info-21.4.6-6.9.1.ia64.rpm

Red Hat Enterprise Linux ES version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1ES/en/os/SRPMS/xemacs-21.4.6-6.9.1.src.rpm
4d31836bc71ca0e31ffdcd2601699d85  xemacs-21.4.6-6.9.1.src.rpm

i386:
9b918791022dbd365d1c2ffc7487ad37  xemacs-21.4.6-6.9.1.i386.rpm
e951c1189a2098befdb5f3e7c7806e38  xemacs-el-21.4.6-6.9.1.i386.rpm
0ae98221a5979e4d22c6c5a82ec88682  xemacs-info-21.4.6-6.9.1.i386.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1WS/en/os/SRPMS/xemacs-21.4.6-6.9.1.src.rpm
4d31836bc71ca0e31ffdcd2601699d85  xemacs-21.4.6-6.9.1.src.rpm

i386:
9b918791022dbd365d1c2ffc7487ad37  xemacs-21.4.6-6.9.1.i386.rpm
e951c1189a2098befdb5f3e7c7806e38  xemacs-el-21.4.6-6.9.1.i386.rpm
0ae98221a5979e4d22c6c5a82ec88682  xemacs-info-21.4.6-6.9.1.i386.rpm

Red Hat Enterprise Linux AS version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/xemacs-21.4.13-8.ent.1.src.rpm
6366093e19b29b094e694f9c98dd247b  xemacs-21.4.13-8.ent.1.src.rpm

i386:
cf850b6ef4f2d8cb5b135d64d06603e7  xemacs-21.4.13-8.ent.1.i386.rpm
20ce76b7491f4925c6eb50988c1ee6fd  xemacs-el-21.4.13-8.ent.1.i386.rpm
30591934bda8c960d6a4a7413a0c99b9  xemacs-info-21.4.13-8.ent.1.i386.rpm

ia64:
92b20d9de180d11b88c5fa58ad5a0dbf  xemacs-21.4.13-8.ent.1.ia64.rpm
c3070054bc6a0b31744538b5e007d4ba  xemacs-el-21.4.13-8.ent.1.ia64.rpm
9e025747828aab85df935b8549a7785d  xemacs-info-21.4.13-8.ent.1.ia64.rpm

ppc:
108e7a89e0a3fa98f68eb577a27d282c  xemacs-21.4.13-8.ent.1.ppc.rpm
ffa9533b7ce42210266485f03a23415c  xemacs-el-21.4.13-8.ent.1.ppc.rpm
f72e70f4cd85f1ad8313984d3d4107fc  xemacs-info-21.4.13-8.ent.1.ppc.rpm

s390:
59a254a6ceab69616f83826e50ae7a30  xemacs-21.4.13-8.ent.1.s390.rpm
c50eacecae3000edd5fbc8a878c72142  xemacs-el-21.4.13-8.ent.1.s390.rpm
d25d73f36604c415b8ec6e7c95fda9fe  xemacs-info-21.4.13-8.ent.1.s390.rpm

s390x:
2788db105bb473b1d773495006d7aee7  xemacs-21.4.13-8.ent.1.s390x.rpm
c337eb51c51849a1d1d3580b206a0dd3  xemacs-el-21.4.13-8.ent.1.s390x.rpm
2accf5d242d37dd20a194c3f9231cd4d  xemacs-info-21.4.13-8.ent.1.s390x.rpm

x86_64:
8b043f8ee239f9ddfc3fd06fea0a2610  xemacs-21.4.13-8.ent.1.x86_64.rpm
da4c3c22771c470f641156ae392364b3  xemacs-el-21.4.13-8.ent.1.x86_64.rpm
e3eee7414558f7da341a7544fd2de084  xemacs-info-21.4.13-8.ent.1.x86_64.rpm

Red Hat Desktop version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/xemacs-21.4.13-8.ent.1.src.rpm
6366093e19b29b094e694f9c98dd247b  xemacs-21.4.13-8.ent.1.src.rpm

i386:
cf850b6ef4f2d8cb5b135d64d06603e7  xemacs-21.4.13-8.ent.1.i386.rpm
20ce76b7491f4925c6eb50988c1ee6fd  xemacs-el-21.4.13-8.ent.1.i386.rpm
30591934bda8c960d6a4a7413a0c99b9  xemacs-info-21.4.13-8.ent.1.i386.rpm

x86_64:
8b043f8ee239f9ddfc3fd06fea0a2610  xemacs-21.4.13-8.ent.1.x86_64.rpm
da4c3c22771c470f641156ae392364b3  xemacs-el-21.4.13-8.ent.1.x86_64.rpm
e3eee7414558f7da341a7544fd2de084  xemacs-info-21.4.13-8.ent.1.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/xemacs-21.4.13-8.ent.1.src.rpm
6366093e19b29b094e694f9c98dd247b  xemacs-21.4.13-8.ent.1.src.rpm

i386:
cf850b6ef4f2d8cb5b135d64d06603e7  xemacs-21.4.13-8.ent.1.i386.rpm
20ce76b7491f4925c6eb50988c1ee6fd  xemacs-el-21.4.13-8.ent.1.i386.rpm
30591934bda8c960d6a4a7413a0c99b9  xemacs-info-21.4.13-8.ent.1.i386.rpm

ia64:
92b20d9de180d11b88c5fa58ad5a0dbf  xemacs-21.4.13-8.ent.1.ia64.rpm
c3070054bc6a0b31744538b5e007d4ba  xemacs-el-21.4.13-8.ent.1.ia64.rpm
9e025747828aab85df935b8549a7785d  xemacs-info-21.4.13-8.ent.1.ia64.rpm

x86_64:
8b043f8ee239f9ddfc3fd06fea0a2610  xemacs-21.4.13-8.ent.1.x86_64.rpm
da4c3c22771c470f641156ae392364b3  xemacs-el-21.4.13-8.ent.1.x86_64.rpm
e3eee7414558f7da341a7544fd2de084  xemacs-info-21.4.13-8.ent.1.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/xemacs-21.4.13-8.ent.1.src.rpm
6366093e19b29b094e694f9c98dd247b  xemacs-21.4.13-8.ent.1.src.rpm

i386:
cf850b6ef4f2d8cb5b135d64d06603e7  xemacs-21.4.13-8.ent.1.i386.rpm
20ce76b7491f4925c6eb50988c1ee6fd  xemacs-el-21.4.13-8.ent.1.i386.rpm
30591934bda8c960d6a4a7413a0c99b9  xemacs-info-21.4.13-8.ent.1.i386.rpm

ia64:
92b20d9de180d11b88c5fa58ad5a0dbf  xemacs-21.4.13-8.ent.1.ia64.rpm
c3070054bc6a0b31744538b5e007d4ba  xemacs-el-21.4.13-8.ent.1.ia64.rpm
9e025747828aab85df935b8549a7785d  xemacs-info-21.4.13-8.ent.1.ia64.rpm

x86_64:
8b043f8ee239f9ddfc3fd06fea0a2610  xemacs-21.4.13-8.ent.1.x86_64.rpm
da4c3c22771c470f641156ae392364b3  xemacs-el-21.4.13-8.ent.1.x86_64.rpm
e3eee7414558f7da341a7544fd2de084  xemacs-info-21.4.13-8.ent.1.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0100

8. Contact:

The Red Hat security contact is .  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2005 Red Hat, Inc.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQFCC5YjXlSAg2UNWIIRAptLAJ4k7yi6F8Jh5FWEF0gwcafmzkpdbgCgjMBt
pFs1yPW7dM8/I32FR9BKOLc=
=gTKu
-----END PGP SIGNATURE-----
Screenshot

Project Spotlight

Kigo Video Converter Ultimate for Mac

A tool for converting and editing videos.

Screenshot

Project Spotlight

Kid3

An efficient tagger for MP3, Ogg/Vorbis, and FLAC files.