Advisories:rPSA-2008-0243

From rPath Wiki

rPath Security Advisory 2008-0243-1

Published: 2008-08-13

Products

• rPath Appliance Platform Linux Service 1
• rPath Appliance Platform Linux Service 2
• rPath Linux 1
• rPath Linux 2

Rating

Major

Exposure Level Classification

Indirect Deterministic Unauthorized Access

Updated Versions

• idle=conary.rpath.com@rpl:1/2.4.1-20.17-1
• idle=conary.rpath.com@rpl:2/2.4.4-41-0.1
• python=conary.rpath.com@rpl:1/2.4.1-20.17-1
• python=conary.rpath.com@rpl:2/2.4.4-41-0.1

rPath Issue Tracking System

• RPL-1412
• RPL-2648

References

• CVE-2008-2316
• CVE-2008-3142
• CVE-2008-3143
• CVE-2008-3144

Description

Previous versions of the python package are vulnerable to multiple

attacks, the most serious of which may allow an attacker to execute

arbitrary code.

Additionally, previous versions of the python package on rPath Linux 2

and rPath Appliance Platform Linux Service 2 did not provide the bsddb

module. This has been corrected.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html