enscript-1.6.4-4.1.1.1AXS3
エラータID: AXSA:2008-538:01
GNU enscript is a free replacement for Adobe's Enscript program. Enscript
converts ASCII files to PostScript(TM) and spools generated PostScript output
to the specified printer or saves it to a file. Enscript can be extended to
handle different output media and includes many options for customizing
printouts.
Bugs fixed:
CVE-2008-3863
Stack-based buffer overflow in the read_special_escape function in src/psgen.c
in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes
processing) option is enabled, allows user-assisted remote attackers to execute
arbitrary code via a crafted ASCII file, related to the setfilename command.
CVE-2008-4306
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors,
possibly related to the font escape sequence.
Update packages
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
N/A
SRPMS
- enscript-1.6.4-4.1.1.1AXS3.src.rpm
MD5: 3c75e49d760246afa74b59766445985a
SHA-256: eba4a7260be8878d5aa18dd4264c8452ecb6918cc2232852bcd18eef6a67a7fb
Size: 1.03 MB
Asianux Server 3 for x86
- enscript-1.6.4-4.1.1.1AXS3.i386.rpm
MD5: 415ac206806f3e5033cae1f3b7a02ef4
SHA-256: 9403780b6aa5406eeeb986e52285d8366499c785627ed70eac66941d65c1c8e7
Size: 475.90 kB
Asianux Server 3 for x86_64
- enscript-1.6.4-4.1.1.1AXS3.x86_64.rpm
MD5: 100b5fefcd993923aadd9ec7f838f4de
SHA-256: 573eb2bfc5bb1e711e63dd13809d39cfabb9cdbfd1009443cc0cf75c3a6cd5f8
Size: 483.83 kB