Skip to content
OpenAdvisories
Unscored RHSA-2008:1021 3 CVEs

Red Hat Security Advisory: enscript security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 2 enterprise_linux:2.1::as enscript 0:1.6.1-16.7
Red Hat · RHEL 2 enterprise_linux:2.1::aw enscript 0:1.6.1-16.7
Red Hat · RHEL 2 enterprise_linux:2.1::es enscript 0:1.6.1-16.7
Red Hat · RHEL 2 enterprise_linux:2.1::ws enscript 0:1.6.1-16.7
Red Hat · RHEL 3 enterprise_linux:3::as enscript 0:1.6.1-24.7
Red Hat · RHEL 3 enterprise_linux:3::as enscript-debuginfo 0:1.6.1-24.7
Red Hat · RHEL 3 enterprise_linux:3::desktop enscript 0:1.6.1-24.7
Red Hat · RHEL 3 enterprise_linux:3::desktop enscript-debuginfo 0:1.6.1-24.7
Red Hat · RHEL 3 enterprise_linux:3::es enscript 0:1.6.1-24.7
Red Hat · RHEL 3 enterprise_linux:3::es enscript-debuginfo 0:1.6.1-24.7
Red Hat · RHEL 3 enterprise_linux:3::ws enscript 0:1.6.1-24.7
Red Hat · RHEL 3 enterprise_linux:3::ws enscript-debuginfo 0:1.6.1-24.7
Red Hat · RHEL 4 enterprise_linux:4::as enscript 0:1.6.1-33.el4_7.1
Red Hat · RHEL 4 enterprise_linux:4::as enscript-debuginfo 0:1.6.1-33.el4_7.1
Red Hat · RHEL 4 enterprise_linux:4::desktop enscript 0:1.6.1-33.el4_7.1
Red Hat · RHEL 4 enterprise_linux:4::desktop enscript-debuginfo 0:1.6.1-33.el4_7.1
Red Hat · RHEL 4 enterprise_linux:4::es enscript 0:1.6.1-33.el4_7.1
Red Hat · RHEL 4 enterprise_linux:4::es enscript-debuginfo 0:1.6.1-33.el4_7.1
Red Hat · RHEL 4 enterprise_linux:4::ws enscript 0:1.6.1-33.el4_7.1
Red Hat · RHEL 4 enterprise_linux:4::ws enscript-debuginfo 0:1.6.1-33.el4_7.1

Vulnerabilities 3

  • Unscored —
    CVE-2008-3863

    Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, wh…

    enscript Debian
  • Unscored —
    CVE-2008-4306

    Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape seq…

    enscript Debian
  • Unscored —
    CVE-2008-5078

    Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c…

    enscript Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=466771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=469311
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=473958
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1021.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-3863
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3863
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3863
  • report
    https://access.redhat.com/security/cve/CVE-2008-4306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4306
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4306
  • report
    https://access.redhat.com/security/cve/CVE-2008-5078
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5078
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5078