Advisories:rPSA-2008-0149

From rPath Wiki

rPath Security Advisory 2008-0149-1

Published: 2008-04-25

Products

• rPath Linux 1
• rPath Appliance Platform Linux Service 1

Rating

Major

Exposure Level Classification

Indirect Deterministic Unauthorized Access

Updated Versions

• idle=conary.rpath.com@rpl:1/2.4.1-20.16-1
• python=conary.rpath.com@rpl:1/2.4.1-20.16-1

rPath Issue Tracking System

• RPL-2424
• RPL-2444

References

• CVE-2008-1679
• CVE-2008-1721

Description

Previous versions of the python package are vulnerable to multiple

attacks, including a Denial of Service in the imageop module and

Arbitrary Code Execution in the zlib module.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html