Red Hat Product Errata RHSA-2005:110 - Security Advisory
Issued:
2005-02-15
Updated:
2005-02-15

RHSA-2005:110 - Security Advisory

Synopsis

emacs security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated Emacs packages that fix a string format issue are now available for
Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red
Hat Security Response Team

Description

Emacs is a powerful, customizable, self-documenting, modeless text editor.

Max Vozeler discovered several format string vulnerabilities in the
movemail utility of Emacs. If a user connects to a malicious POP server,
an attacker can execute arbitrary code as the user running emacs. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0100 to this issue.

Users of Emacs are advised to upgrade to these updated packages, which
contain backported patches to correct this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

  • BZ - 146702 - CAN-2005-0100 Arbitrary code execution in *emacs*

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
emacs-21.3-19.EL.1.src.rpm SHA-256: 8aa5562a25019a2abcd0a85abb86dde2bb4535530e6aeba11c1b139395bb06ea
x86_64
emacs-21.3-19.EL.1.x86_64.rpm SHA-256: 2bee5cc42089a82dad1e2f865561174680ee696b1b1c330b68ad9dd8d7e2b045
emacs-21.3-19.EL.1.x86_64.rpm SHA-256: 2bee5cc42089a82dad1e2f865561174680ee696b1b1c330b68ad9dd8d7e2b045
emacs-common-21.3-19.EL.1.x86_64.rpm SHA-256: 868da9c2b26c04fc4347a8729834fa20468df8ea7ca20b7dc5be8f12eb80efba
emacs-common-21.3-19.EL.1.x86_64.rpm SHA-256: 868da9c2b26c04fc4347a8729834fa20468df8ea7ca20b7dc5be8f12eb80efba
emacs-el-21.3-19.EL.1.x86_64.rpm SHA-256: b3d99be5450e61d93ba9f982bf4a0a3514e1937cb02ac0f209df6534dc8bb7e3
emacs-el-21.3-19.EL.1.x86_64.rpm SHA-256: b3d99be5450e61d93ba9f982bf4a0a3514e1937cb02ac0f209df6534dc8bb7e3
emacs-leim-21.3-19.EL.1.x86_64.rpm SHA-256: 9b8e217807514716b92388dd71bccfd47d84ab390712201d5b4f326212c4e7a2
emacs-leim-21.3-19.EL.1.x86_64.rpm SHA-256: 9b8e217807514716b92388dd71bccfd47d84ab390712201d5b4f326212c4e7a2
emacs-nox-21.3-19.EL.1.x86_64.rpm SHA-256: f055e504cc9415cffae0c6fa1b8222d84dbde5f5aef988e75140869ac7f4d2cb
emacs-nox-21.3-19.EL.1.x86_64.rpm SHA-256: f055e504cc9415cffae0c6fa1b8222d84dbde5f5aef988e75140869ac7f4d2cb
ia64
emacs-21.3-19.EL.1.ia64.rpm SHA-256: 3dd86e29820c9c1c129f4f6dfa6a0cf691bffdc7b7aa8babfbe67168d6382b20
emacs-21.3-19.EL.1.ia64.rpm SHA-256: 3dd86e29820c9c1c129f4f6dfa6a0cf691bffdc7b7aa8babfbe67168d6382b20
emacs-common-21.3-19.EL.1.ia64.rpm SHA-256: 7a100e16db40887ca744373b9f34c1de6bb530ac03a065a8c9feec5ed52ae5f7
emacs-common-21.3-19.EL.1.ia64.rpm SHA-256: 7a100e16db40887ca744373b9f34c1de6bb530ac03a065a8c9feec5ed52ae5f7
emacs-el-21.3-19.EL.1.ia64.rpm SHA-256: b4ff159cbe6b7232583dee79ad837bbffaba67b94ba5504e1c3dc879549867f1
emacs-el-21.3-19.EL.1.ia64.rpm SHA-256: b4ff159cbe6b7232583dee79ad837bbffaba67b94ba5504e1c3dc879549867f1
emacs-leim-21.3-19.EL.1.ia64.rpm SHA-256: ed2511ce771806467c3d632a6bf77fe9fbc7037354ca18d74f0ec214b55bb0aa
emacs-leim-21.3-19.EL.1.ia64.rpm SHA-256: ed2511ce771806467c3d632a6bf77fe9fbc7037354ca18d74f0ec214b55bb0aa
emacs-nox-21.3-19.EL.1.ia64.rpm SHA-256: 0fc19874248b8eeaf89f27d57faee7d727664539934d403e95c5eb40dd69d8ac
emacs-nox-21.3-19.EL.1.ia64.rpm SHA-256: 0fc19874248b8eeaf89f27d57faee7d727664539934d403e95c5eb40dd69d8ac
i386
emacs-21.3-19.EL.1.i386.rpm SHA-256: cf54ed101fdb52a8f42359b04b21d6b71166bc7f726ff828719ca2e5c90b274a
emacs-21.3-19.EL.1.i386.rpm SHA-256: cf54ed101fdb52a8f42359b04b21d6b71166bc7f726ff828719ca2e5c90b274a
emacs-common-21.3-19.EL.1.i386.rpm SHA-256: 0e7bc75a9c88e484626dccb7ca64610de2297ff4e66d293b1d2a5255348c379d
emacs-common-21.3-19.EL.1.i386.rpm SHA-256: 0e7bc75a9c88e484626dccb7ca64610de2297ff4e66d293b1d2a5255348c379d
emacs-el-21.3-19.EL.1.i386.rpm SHA-256: 0fc8868704bf9f3aef87eb7a1a286e8608071840c4c8298a10ef44b0a32210eb
emacs-el-21.3-19.EL.1.i386.rpm SHA-256: 0fc8868704bf9f3aef87eb7a1a286e8608071840c4c8298a10ef44b0a32210eb
emacs-leim-21.3-19.EL.1.i386.rpm SHA-256: ca01c9932f975c5365e6e594182d6cb02c7e583576b4dd514a77fd4a0536cd10
emacs-leim-21.3-19.EL.1.i386.rpm SHA-256: ca01c9932f975c5365e6e594182d6cb02c7e583576b4dd514a77fd4a0536cd10
emacs-nox-21.3-19.EL.1.i386.rpm SHA-256: e3912414d3b2f5b4f2119ad1804c1423c75c6b9b9643ee30f4914a04a4328551
emacs-nox-21.3-19.EL.1.i386.rpm SHA-256: e3912414d3b2f5b4f2119ad1804c1423c75c6b9b9643ee30f4914a04a4328551

Red Hat Enterprise Linux Workstation 4

SRPM
emacs-21.3-19.EL.1.src.rpm SHA-256: 8aa5562a25019a2abcd0a85abb86dde2bb4535530e6aeba11c1b139395bb06ea
x86_64
emacs-21.3-19.EL.1.x86_64.rpm SHA-256: 2bee5cc42089a82dad1e2f865561174680ee696b1b1c330b68ad9dd8d7e2b045
emacs-common-21.3-19.EL.1.x86_64.rpm SHA-256: 868da9c2b26c04fc4347a8729834fa20468df8ea7ca20b7dc5be8f12eb80efba
emacs-el-21.3-19.EL.1.x86_64.rpm SHA-256: b3d99be5450e61d93ba9f982bf4a0a3514e1937cb02ac0f209df6534dc8bb7e3
emacs-leim-21.3-19.EL.1.x86_64.rpm SHA-256: 9b8e217807514716b92388dd71bccfd47d84ab390712201d5b4f326212c4e7a2
emacs-nox-21.3-19.EL.1.x86_64.rpm SHA-256: f055e504cc9415cffae0c6fa1b8222d84dbde5f5aef988e75140869ac7f4d2cb
ia64
emacs-21.3-19.EL.1.ia64.rpm SHA-256: 3dd86e29820c9c1c129f4f6dfa6a0cf691bffdc7b7aa8babfbe67168d6382b20
emacs-common-21.3-19.EL.1.ia64.rpm SHA-256: 7a100e16db40887ca744373b9f34c1de6bb530ac03a065a8c9feec5ed52ae5f7
emacs-el-21.3-19.EL.1.ia64.rpm SHA-256: b4ff159cbe6b7232583dee79ad837bbffaba67b94ba5504e1c3dc879549867f1
emacs-leim-21.3-19.EL.1.ia64.rpm SHA-256: ed2511ce771806467c3d632a6bf77fe9fbc7037354ca18d74f0ec214b55bb0aa
emacs-nox-21.3-19.EL.1.ia64.rpm SHA-256: 0fc19874248b8eeaf89f27d57faee7d727664539934d403e95c5eb40dd69d8ac
i386
emacs-21.3-19.EL.1.i386.rpm SHA-256: cf54ed101fdb52a8f42359b04b21d6b71166bc7f726ff828719ca2e5c90b274a
emacs-common-21.3-19.EL.1.i386.rpm SHA-256: 0e7bc75a9c88e484626dccb7ca64610de2297ff4e66d293b1d2a5255348c379d
emacs-el-21.3-19.EL.1.i386.rpm SHA-256: 0fc8868704bf9f3aef87eb7a1a286e8608071840c4c8298a10ef44b0a32210eb
emacs-leim-21.3-19.EL.1.i386.rpm SHA-256: ca01c9932f975c5365e6e594182d6cb02c7e583576b4dd514a77fd4a0536cd10
emacs-nox-21.3-19.EL.1.i386.rpm SHA-256: e3912414d3b2f5b4f2119ad1804c1423c75c6b9b9643ee30f4914a04a4328551

Red Hat Enterprise Linux Desktop 4

SRPM
emacs-21.3-19.EL.1.src.rpm SHA-256: 8aa5562a25019a2abcd0a85abb86dde2bb4535530e6aeba11c1b139395bb06ea
x86_64
emacs-21.3-19.EL.1.x86_64.rpm SHA-256: 2bee5cc42089a82dad1e2f865561174680ee696b1b1c330b68ad9dd8d7e2b045
emacs-common-21.3-19.EL.1.x86_64.rpm SHA-256: 868da9c2b26c04fc4347a8729834fa20468df8ea7ca20b7dc5be8f12eb80efba
emacs-el-21.3-19.EL.1.x86_64.rpm SHA-256: b3d99be5450e61d93ba9f982bf4a0a3514e1937cb02ac0f209df6534dc8bb7e3
emacs-leim-21.3-19.EL.1.x86_64.rpm SHA-256: 9b8e217807514716b92388dd71bccfd47d84ab390712201d5b4f326212c4e7a2
emacs-nox-21.3-19.EL.1.x86_64.rpm SHA-256: f055e504cc9415cffae0c6fa1b8222d84dbde5f5aef988e75140869ac7f4d2cb
i386
emacs-21.3-19.EL.1.i386.rpm SHA-256: cf54ed101fdb52a8f42359b04b21d6b71166bc7f726ff828719ca2e5c90b274a
emacs-common-21.3-19.EL.1.i386.rpm SHA-256: 0e7bc75a9c88e484626dccb7ca64610de2297ff4e66d293b1d2a5255348c379d
emacs-el-21.3-19.EL.1.i386.rpm SHA-256: 0fc8868704bf9f3aef87eb7a1a286e8608071840c4c8298a10ef44b0a32210eb
emacs-leim-21.3-19.EL.1.i386.rpm SHA-256: ca01c9932f975c5365e6e594182d6cb02c7e583576b4dd514a77fd4a0536cd10
emacs-nox-21.3-19.EL.1.i386.rpm SHA-256: e3912414d3b2f5b4f2119ad1804c1423c75c6b9b9643ee30f4914a04a4328551

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
emacs-21.3-19.EL.1.src.rpm SHA-256: 8aa5562a25019a2abcd0a85abb86dde2bb4535530e6aeba11c1b139395bb06ea
s390x
emacs-21.3-19.EL.1.s390x.rpm SHA-256: 732d4e7d610d2b9194ed925c779c4d4969a4588e4ed65e7f4b3ff4513c951ffc
emacs-common-21.3-19.EL.1.s390x.rpm SHA-256: 196ba2427919e3eea64e945c4adac6e3b9be68963b10ba62653af99ce84d3b5a
emacs-el-21.3-19.EL.1.s390x.rpm SHA-256: 1e09d168bae6fcaf7cdbaa2ad3a524bf864156c4bf32404d5659e98e6f8d7a55
emacs-leim-21.3-19.EL.1.s390x.rpm SHA-256: ac8064a45d2cfd446b697bdc1d67056b48e5dd1634ad86eec426c71de4997f2f
emacs-nox-21.3-19.EL.1.s390x.rpm SHA-256: 3715f0c0b103780ba719049afad98ad47d429f401d01d178b863ef7e9a7118bf
s390
emacs-21.3-19.EL.1.s390.rpm SHA-256: 27a02b18e118ef9e9a98dd6e21378d3fb7dbb65219aae83e17c4107ef567d500
emacs-common-21.3-19.EL.1.s390.rpm SHA-256: 3b5d59b9519178e8dcfa02524fbef9fa103ef3ea37fa8cf873d19d77d9b25e89
emacs-el-21.3-19.EL.1.s390.rpm SHA-256: 1762858cdb2da8e7f7f4406ab79c6ad4be7ceb859de26e68a80090cd3775d146
emacs-leim-21.3-19.EL.1.s390.rpm SHA-256: af6eb77d89d36e33c4bbe649699326cde141add6d940f43dbf1a57e83d1ce11c
emacs-nox-21.3-19.EL.1.s390.rpm SHA-256: 3cfa55526c90382e7951e8188273d41fca439862d668486b01f1bd9e74934fbc

Red Hat Enterprise Linux for Power, big endian 4

SRPM
emacs-21.3-19.EL.1.src.rpm SHA-256: 8aa5562a25019a2abcd0a85abb86dde2bb4535530e6aeba11c1b139395bb06ea
ppc
emacs-21.3-19.EL.1.ppc.rpm SHA-256: 5dd6b372ddc0aa8fff1152b4271badec40e8c23744d7074b875f70de352e530f
emacs-common-21.3-19.EL.1.ppc.rpm SHA-256: d485391663747c052b2b1828c204ffc9cc60d25dfb2a0f0e863f44fc88b43cc5
emacs-el-21.3-19.EL.1.ppc.rpm SHA-256: 5253c757836b30622c964e7b9146dcf3ff2c59440aff8ac2f9c10528092af203
emacs-leim-21.3-19.EL.1.ppc.rpm SHA-256: 16d3a6fe36fd0b5a8115558c316e215a3d818d0c177957232dce1c06a379b9f0
emacs-nox-21.3-19.EL.1.ppc.rpm SHA-256: 382c7093cb22064fc55c922b6e50588a8dd4125b83cb6e75ed0da9abf510dc10

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.