Paketname
epiphany
Datum
2009-02-25
Advisory ID
MDVSA-2009:048-2
Betroffene Versionen
2008.1 x86_64 , 2008.1 i586

Problembeschreibung

Python has a variable called sys.path that contains all paths where
Python loads modules by using import scripting procedure. A wrong
handling of that variable enables local attackers to execute arbitrary
code via Python scripting in the current Epiphany working directory
(CVE-2008-5985).

This update provides fix for that vulnerability.

Update:

The previous update package was not built against the correct (latest)
libxulrunner-1.9.0.6 library (fixes #48163)

Aktualisierte Pakete

2008.1 x86_64

 06731986f1f534739d2421ebc94e4714  2008.1/x86_64/epiphany-2.22.3-0.3mdv2008.1.x86_64.rpm
 a98351efcc10e336e5e6b78caa4697b8  2008.1/x86_64/epiphany-devel-2.22.3-0.3mdv2008.1.x86_64.rpm 
 c605be70a70b503027c9d1f5da3305c4  2008.1/SRPMS/epiphany-2.22.3-0.3mdv2008.1.src.rpm

2008.1 i586

 a93951cb851094952d151e3da49d6212  2008.1/i586/epiphany-2.22.3-0.3mdv2008.1.i586.rpm
 b5e6b0322dbad813e3285dc4d8efab6e  2008.1/i586/epiphany-devel-2.22.3-0.3mdv2008.1.i586.rpm 
 c605be70a70b503027c9d1f5da3305c4  2008.1/SRPMS/epiphany-2.22.3-0.3mdv2008.1.src.rpm

Referenzen