Advisories:rPSA-2008-0321

From rPath Wiki

rPath Security Advisory 2008-0321-1

Published: 2008-11-17

Products

• rPath Linux 1
• rPath Linux 2

Rating

Minor

Exposure Level Classification

Indirect User Deterministic Unauthorized Access

Updated Versions

• enscript=conary.rpath.com@rpl:1/1.6.1-8.4-1
• enscript=conary.rpath.com@rpl:2/1.6.4-4-0.1

rPath Issue Tracking System

• RPL-2887

References

• CVE-2008-3863
• CVE-2008-4306

Description

Previous versions of the enscript package contain multiple

vulnerabilities, the most serious of which may allow a

user-assisted attacker to execute arbitrary code via a

maliciously crafted ASCII file.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html