pkgsrc-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
pkg/29721: enscript has had security vulnerability for weeks
>Number: 29721
>Category: pkg
>Synopsis: enscript has had security vulnerability for weeks
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: pkg-manager
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Thu Mar 17 01:44:00 +0000 2005
>Originator: John Kohl
>Release: NetBSD 2.0
>Organization:
NetBSD Kernel Hackers `R` Us
>Environment:
System: NetBSD desktop.john.kohl.name 2.0 NetBSD 2.0 (KOLVIR-$Revision: 1.57 $)
#1: Mon Feb 21 13:58:26 EST 2005
jtk%kolvir.arlington.ma.us@localhost:/usr/users/jtk/sandbox/src/sys/arch/i386/compile/KOLVIR
i386
Architecture: i386
Machine: i386
>Description:
Package enscript-1.6.1nb2 has a remote-code-execution vulnerability,
see http://www.securityfocus.org/advisories/7879
No updates to this package in the ~month since this advisory
showed up.
>How-To-Repeat:
try to build enscript. Latest pkgsrc/print/enscript/Makefile
is: # $NetBSD: Makefile,v 1.26 2004/05/28 00:54:50 lukem Exp $
and generates enscript-1.6.1nb2.
>Fix:
>Unformatted:
Home |
Main Index |
Thread Index |
Old Index