Red Hat Product Errata RHSA-2005:133 - Security Advisory
Issued:
2005-02-15
Updated:
2005-02-15

RHSA-2005:133 - Security Advisory

Synopsis

xemacs security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated XEmacs packages that fix a string format issue are now available for
Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

XEmacs is a powerful, customizable, self-documenting, modeless text editor.

Max Vozeler discovered several format string vulnerabilities in the
movemail utility of XEmacs. If a user connects to a malicious POP server,
an attacker can execute arbitrary code as the user running xemacs. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0100 to this issue.

Users of XEmacs are advised to upgrade to these updated packages, which
contain backported patches to correct this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

  • BZ - 146706 - CAN-2005-0100 Arbitrary code execution in *emacs*

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
xemacs-21.4.15-10.EL.1.src.rpm SHA-256: d0b77bdf0538fdea925f92dd979c1c6d9ce2faa77045cdee13a0198d2ea043e3
x86_64
xemacs-21.4.15-10.EL.1.x86_64.rpm SHA-256: 9bdf554b0b34b18200768630100151f4940debeb268ce16b553e1790715cb2e3
xemacs-21.4.15-10.EL.1.x86_64.rpm SHA-256: 9bdf554b0b34b18200768630100151f4940debeb268ce16b553e1790715cb2e3
xemacs-common-21.4.15-10.EL.1.x86_64.rpm SHA-256: 9cb7e7e6c60695f723f0b155e7eb9ca361e245bc8e36d37c847a2c8f15f16fcb
xemacs-common-21.4.15-10.EL.1.x86_64.rpm SHA-256: 9cb7e7e6c60695f723f0b155e7eb9ca361e245bc8e36d37c847a2c8f15f16fcb
xemacs-el-21.4.15-10.EL.1.x86_64.rpm SHA-256: 5c2cef9f1ece6373866fd3063a2b0604bb8b25dd2ef374536bf9427e5e28d97f
xemacs-el-21.4.15-10.EL.1.x86_64.rpm SHA-256: 5c2cef9f1ece6373866fd3063a2b0604bb8b25dd2ef374536bf9427e5e28d97f
xemacs-info-21.4.15-10.EL.1.x86_64.rpm SHA-256: f789b2e46f9522fe2559d6ee9a1b052380875ee0b08bf6d47111ebb274685007
xemacs-info-21.4.15-10.EL.1.x86_64.rpm SHA-256: f789b2e46f9522fe2559d6ee9a1b052380875ee0b08bf6d47111ebb274685007
xemacs-nox-21.4.15-10.EL.1.x86_64.rpm SHA-256: cb37e318e2c562975f2dee4f3d52ea31de5486dac6df4b544e121d81df923794
xemacs-nox-21.4.15-10.EL.1.x86_64.rpm SHA-256: cb37e318e2c562975f2dee4f3d52ea31de5486dac6df4b544e121d81df923794
ia64
xemacs-21.4.15-10.EL.1.ia64.rpm SHA-256: bedfa0502660799134055c5e25656f24f9d507d5763b928021f4ffc15a7bd5cf
xemacs-21.4.15-10.EL.1.ia64.rpm SHA-256: bedfa0502660799134055c5e25656f24f9d507d5763b928021f4ffc15a7bd5cf
xemacs-common-21.4.15-10.EL.1.ia64.rpm SHA-256: 6e589859fb5914eb29430f8734007ee3e26063c364ce893c54f62d39c27d1914
xemacs-common-21.4.15-10.EL.1.ia64.rpm SHA-256: 6e589859fb5914eb29430f8734007ee3e26063c364ce893c54f62d39c27d1914
xemacs-el-21.4.15-10.EL.1.ia64.rpm SHA-256: a967d739bf8b12d1064f3e56c41b30165798207dc202f3281f955d073774c10c
xemacs-el-21.4.15-10.EL.1.ia64.rpm SHA-256: a967d739bf8b12d1064f3e56c41b30165798207dc202f3281f955d073774c10c
xemacs-info-21.4.15-10.EL.1.ia64.rpm SHA-256: 7264b8b42882acc17104f2c3644ef21e1bad716d60c84048ade726b5c88f3e57
xemacs-info-21.4.15-10.EL.1.ia64.rpm SHA-256: 7264b8b42882acc17104f2c3644ef21e1bad716d60c84048ade726b5c88f3e57
xemacs-nox-21.4.15-10.EL.1.ia64.rpm SHA-256: a51f9ca39a79621b209cf6692615f7d5430e1e7adf8bb948cae12ef47f9bc68a
xemacs-nox-21.4.15-10.EL.1.ia64.rpm SHA-256: a51f9ca39a79621b209cf6692615f7d5430e1e7adf8bb948cae12ef47f9bc68a
i386
xemacs-21.4.15-10.EL.1.i386.rpm SHA-256: 87ac4bfda9b78294a0a90f2cc12704589f1856322d538b3121105eb3ab9af0da
xemacs-21.4.15-10.EL.1.i386.rpm SHA-256: 87ac4bfda9b78294a0a90f2cc12704589f1856322d538b3121105eb3ab9af0da
xemacs-common-21.4.15-10.EL.1.i386.rpm SHA-256: b3036f57d042c6235abed2e385ca11185f47321f68206e82bbcf709b94c9a463
xemacs-common-21.4.15-10.EL.1.i386.rpm SHA-256: b3036f57d042c6235abed2e385ca11185f47321f68206e82bbcf709b94c9a463
xemacs-el-21.4.15-10.EL.1.i386.rpm SHA-256: 2a21e2478598028d59223eb6a8cc05a91792a162af873b0e3bbd37e4acd63bea
xemacs-el-21.4.15-10.EL.1.i386.rpm SHA-256: 2a21e2478598028d59223eb6a8cc05a91792a162af873b0e3bbd37e4acd63bea
xemacs-info-21.4.15-10.EL.1.i386.rpm SHA-256: 546ea284494aedf5dc1fe0dfd3d13dc19678ae0b81a6f874895dda35610ab57e
xemacs-info-21.4.15-10.EL.1.i386.rpm SHA-256: 546ea284494aedf5dc1fe0dfd3d13dc19678ae0b81a6f874895dda35610ab57e
xemacs-nox-21.4.15-10.EL.1.i386.rpm SHA-256: 2c39370207d303ea4a0200ea31997b83f5e3993d3c3c9cbd7b4606e4c908dbed
xemacs-nox-21.4.15-10.EL.1.i386.rpm SHA-256: 2c39370207d303ea4a0200ea31997b83f5e3993d3c3c9cbd7b4606e4c908dbed

Red Hat Enterprise Linux Workstation 4

SRPM
xemacs-21.4.15-10.EL.1.src.rpm SHA-256: d0b77bdf0538fdea925f92dd979c1c6d9ce2faa77045cdee13a0198d2ea043e3
x86_64
xemacs-21.4.15-10.EL.1.x86_64.rpm SHA-256: 9bdf554b0b34b18200768630100151f4940debeb268ce16b553e1790715cb2e3
xemacs-common-21.4.15-10.EL.1.x86_64.rpm SHA-256: 9cb7e7e6c60695f723f0b155e7eb9ca361e245bc8e36d37c847a2c8f15f16fcb
xemacs-el-21.4.15-10.EL.1.x86_64.rpm SHA-256: 5c2cef9f1ece6373866fd3063a2b0604bb8b25dd2ef374536bf9427e5e28d97f
xemacs-info-21.4.15-10.EL.1.x86_64.rpm SHA-256: f789b2e46f9522fe2559d6ee9a1b052380875ee0b08bf6d47111ebb274685007
xemacs-nox-21.4.15-10.EL.1.x86_64.rpm SHA-256: cb37e318e2c562975f2dee4f3d52ea31de5486dac6df4b544e121d81df923794
ia64
xemacs-21.4.15-10.EL.1.ia64.rpm SHA-256: bedfa0502660799134055c5e25656f24f9d507d5763b928021f4ffc15a7bd5cf
xemacs-common-21.4.15-10.EL.1.ia64.rpm SHA-256: 6e589859fb5914eb29430f8734007ee3e26063c364ce893c54f62d39c27d1914
xemacs-el-21.4.15-10.EL.1.ia64.rpm SHA-256: a967d739bf8b12d1064f3e56c41b30165798207dc202f3281f955d073774c10c
xemacs-info-21.4.15-10.EL.1.ia64.rpm SHA-256: 7264b8b42882acc17104f2c3644ef21e1bad716d60c84048ade726b5c88f3e57
xemacs-nox-21.4.15-10.EL.1.ia64.rpm SHA-256: a51f9ca39a79621b209cf6692615f7d5430e1e7adf8bb948cae12ef47f9bc68a
i386
xemacs-21.4.15-10.EL.1.i386.rpm SHA-256: 87ac4bfda9b78294a0a90f2cc12704589f1856322d538b3121105eb3ab9af0da
xemacs-common-21.4.15-10.EL.1.i386.rpm SHA-256: b3036f57d042c6235abed2e385ca11185f47321f68206e82bbcf709b94c9a463
xemacs-el-21.4.15-10.EL.1.i386.rpm SHA-256: 2a21e2478598028d59223eb6a8cc05a91792a162af873b0e3bbd37e4acd63bea
xemacs-info-21.4.15-10.EL.1.i386.rpm SHA-256: 546ea284494aedf5dc1fe0dfd3d13dc19678ae0b81a6f874895dda35610ab57e
xemacs-nox-21.4.15-10.EL.1.i386.rpm SHA-256: 2c39370207d303ea4a0200ea31997b83f5e3993d3c3c9cbd7b4606e4c908dbed

Red Hat Enterprise Linux Desktop 4

SRPM
xemacs-21.4.15-10.EL.1.src.rpm SHA-256: d0b77bdf0538fdea925f92dd979c1c6d9ce2faa77045cdee13a0198d2ea043e3
x86_64
xemacs-21.4.15-10.EL.1.x86_64.rpm SHA-256: 9bdf554b0b34b18200768630100151f4940debeb268ce16b553e1790715cb2e3
xemacs-common-21.4.15-10.EL.1.x86_64.rpm SHA-256: 9cb7e7e6c60695f723f0b155e7eb9ca361e245bc8e36d37c847a2c8f15f16fcb
xemacs-el-21.4.15-10.EL.1.x86_64.rpm SHA-256: 5c2cef9f1ece6373866fd3063a2b0604bb8b25dd2ef374536bf9427e5e28d97f
xemacs-info-21.4.15-10.EL.1.x86_64.rpm SHA-256: f789b2e46f9522fe2559d6ee9a1b052380875ee0b08bf6d47111ebb274685007
xemacs-nox-21.4.15-10.EL.1.x86_64.rpm SHA-256: cb37e318e2c562975f2dee4f3d52ea31de5486dac6df4b544e121d81df923794
i386
xemacs-21.4.15-10.EL.1.i386.rpm SHA-256: 87ac4bfda9b78294a0a90f2cc12704589f1856322d538b3121105eb3ab9af0da
xemacs-common-21.4.15-10.EL.1.i386.rpm SHA-256: b3036f57d042c6235abed2e385ca11185f47321f68206e82bbcf709b94c9a463
xemacs-el-21.4.15-10.EL.1.i386.rpm SHA-256: 2a21e2478598028d59223eb6a8cc05a91792a162af873b0e3bbd37e4acd63bea
xemacs-info-21.4.15-10.EL.1.i386.rpm SHA-256: 546ea284494aedf5dc1fe0dfd3d13dc19678ae0b81a6f874895dda35610ab57e
xemacs-nox-21.4.15-10.EL.1.i386.rpm SHA-256: 2c39370207d303ea4a0200ea31997b83f5e3993d3c3c9cbd7b4606e4c908dbed

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
xemacs-21.4.15-10.EL.1.src.rpm SHA-256: d0b77bdf0538fdea925f92dd979c1c6d9ce2faa77045cdee13a0198d2ea043e3
s390x
xemacs-21.4.15-10.EL.1.s390x.rpm SHA-256: b1fc9f7e046a16c78f0203a81e2390621c2ddec00d400dbd72090941ba27c4c5
xemacs-common-21.4.15-10.EL.1.s390x.rpm SHA-256: dba05d87fe84f5b3ae258b2694a0dd02cb02f9d41d9318d0e35615a48edad2fe
xemacs-el-21.4.15-10.EL.1.s390x.rpm SHA-256: 9ce12c266bd0ee4aef1f79337f9f80fab862a3777e3031a861d1a1bc33456a91
xemacs-info-21.4.15-10.EL.1.s390x.rpm SHA-256: 97bbf7b26d56b8ce5be2773429f1cfac545bfec3da50266f267eafec6d017d9d
xemacs-nox-21.4.15-10.EL.1.s390x.rpm SHA-256: 9bdad117f077b5fa65fa993fc6ed0d1b4ccafe4f0eee3f763190c3ff48f88e4f
s390
xemacs-21.4.15-10.EL.1.s390.rpm SHA-256: 4148e80e152f2380beb8005212ca5b81970a56a9cd2166cfc85220a0343f5e64
xemacs-common-21.4.15-10.EL.1.s390.rpm SHA-256: f0644b51f2827323c3a16b1fce83aff955fe80f87d3da462c062d7ebe1780556
xemacs-el-21.4.15-10.EL.1.s390.rpm SHA-256: 70981a9a7740bbeeb4e4e8369de64821ad659e0889311983a457dd1edf36f08a
xemacs-info-21.4.15-10.EL.1.s390.rpm SHA-256: eebd7063001c0562d19673e97101daf5e4d6f440f32b58a1dd03d57092b67855
xemacs-nox-21.4.15-10.EL.1.s390.rpm SHA-256: 744669825ff63882d649cc9ee26a540746a5da1d7e09af4b06d4ddee063970a9

Red Hat Enterprise Linux for Power, big endian 4

SRPM
xemacs-21.4.15-10.EL.1.src.rpm SHA-256: d0b77bdf0538fdea925f92dd979c1c6d9ce2faa77045cdee13a0198d2ea043e3
ppc
xemacs-21.4.15-10.EL.1.ppc.rpm SHA-256: 7a27ee825d1a9630037635e679bd9b0724e51b9abe432ee1abd4bcc037f38ba2
xemacs-common-21.4.15-10.EL.1.ppc.rpm SHA-256: a446a71c58db633895bed87173c47648efec728b59c67089c30e46c9b3d9f7e6
xemacs-el-21.4.15-10.EL.1.ppc.rpm SHA-256: 31f547da3bca3cd77a1febc64d667b10e7baeeb17a16cfbd94cb65c92a3606ce
xemacs-info-21.4.15-10.EL.1.ppc.rpm SHA-256: 5515f245db184c8d1ddd6c7e7b1b30ab057913c89fb972f4d07dea50ec5a79c5
xemacs-nox-21.4.15-10.EL.1.ppc.rpm SHA-256: d48d07c68b8ce06512eaa3358f68c2d0b46a77d9da1d8a4dc77eab52d2c787dd

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.