Skip to content
OpenAdvisories
Unscored RHSA-2004:178 2 CVEs

Red Hat Security Advisory: lha security update

Published Nov 5, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as lha 0:1.14i-10.2
Red Hat · RHEL 3 enterprise_linux:3::as lha-debuginfo 0:1.14i-10.2
Red Hat · RHEL 3 enterprise_linux:3::desktop lha 0:1.14i-10.2
Red Hat · RHEL 3 enterprise_linux:3::desktop lha-debuginfo 0:1.14i-10.2
Red Hat · RHEL 3 enterprise_linux:3::es lha 0:1.14i-10.2
Red Hat · RHEL 3 enterprise_linux:3::es lha-debuginfo 0:1.14i-10.2
Red Hat · RHEL 3 enterprise_linux:3::ws lha 0:1.14i-10.2
Red Hat · RHEL 3 enterprise_linux:3::ws lha-debuginfo 0:1.14i-10.2

Vulnerabilities 2

  • Unscored —
    CVE-2004-0234 EPSS 10%

    Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as …

  • Unscored —
    CVE-2004-0235

    Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary file…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=121417
  • article
    https://access.redhat.com/security/updates/classification/#important
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_178.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618362
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0234
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0234
  • report
    https://access.redhat.com/security/cve/CVE-2004-0235
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617184
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0235
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0235