luci-0.26.0-63.AXS4

エラータID: AXSA:2015-006:01

Release date: 
Wednesday, January 21, 2015 - 11:37
Subject: 
luci-0.26.0-63.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

Description :
Luci is a web-based high availability administration application built on the
TurboGears 2 framework.

Security issues fixed with this release:

CVE-2014-3593
Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration.

Fixed bugs:

These updated luci packages also include several bug fixes and multiple enhancements. Please see changelog for more information.

Solution: 

Update package.

CVEs: 
2014-3593

Additional Info: 

N/A

Download: 

SRPMS
  1. luci-0.26.0-63.AXS4.src.rpm
    MD5: 54b989311fc9e9364b2fa599f31dd1f2
    SHA-256: 489d9c7f17a5e0d1a6de6aaec0262a20d48d8f93e402038e9bef4d5d6a7cbfe1
    Size: 526.62 kB

Asianux Server 4 for x86
  1. luci-0.26.0-63.AXS4.i686.rpm
    MD5: 300bc229a8428c7497faa6b9c70e3089
    SHA-256: 4e971e65a397ef32f0c62b9a7700d782486b9528f927aa6ba092e100f9d7f4a6
    Size: 574.89 kB

Asianux Server 4 for x86_64
  1. luci-0.26.0-63.AXS4.x86_64.rpm
    MD5: 4ae1eff729267a51d5c29db24c793534
    SHA-256: 99ad9d2da1d8eacf17643f76e3f6904bddcbaf4170cdea533cb20255e3ad2ef4
    Size: 574.61 kB