Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 8: 2008-7619 Moderate: Unsafe Temp Directory Handling Fix

fedora
Calendar Grey September 10, 2008
Dist Fedora Esm H88
R 2.7.2 update addresses a security vulnerability related to improper management of temporary directories in the javareconf script.
Update to R 2.7.2, also fixes security issue with unsafe temp directory handling in javareconf script.

Summary

RPy provides a robust Python interface to the R

programming language. It can manage all kinds of R objects and can

execute arbitrary R functions. All the errors from the R language are

converted to Python exceptions.

Update Information:

Update to R 2.7.2, also fixes security issue with unsafe temp directory handling in javareconf script.

Topics%20covered

Topics Covered

security advisory moderate security issue Fedora rpy temp directory unsafe handling

Change Log

* Fri Aug 29 2008 Tom "spot" Callaway - 1.0.3-3 - rebuild against R-2.7.2 * Tue Jul 8 2008 Tom "spot" Callaway - 1.0.3-2 - rebuild against R 2.7.1 * Wed May 21 2008 José Matos - 1.0.3-1 - Update to 1.0.3 - Backport two patches from upstream (turn off debug and use the lapack version that R was compiled with) * Tue Apr 29 2008 Tom "spot" Callaway - 1.0.2-1 - update to 1.0.2 - R 2.7.0 * Wed Feb 13 2008 José Matos - 1.0.1-5 - BR texinfo -> texinfo-tex * Wed Feb 13 2008 José Matos - 1.0.1-4 - Rebuild for gcc 4.3 * Fri Feb 8 2008 Tom "spot" Callaway - 1.0.1-3 - rebuild for R 2.6.2 * Mon Feb 4 2008 José Matos - 1.0.1-2 - Sometimes _patch_'s guesses are not good enough. Redo patch to setup.py. * Sun Feb 3 2008 José Matos - 1.0.1-1 - New upstream release. * Mon Jan 7 2008 Tom "spot" Callaway - 1.0-0.7.RC3 - find the moved R headers in their new home (/usr/include/R) * Mon Jan 7 2008 Alex Lancaster - 1.0-0.6.RC3 - BuildRequires: R-devel rather than just R * Mon Nov 26 2007 Tom "spot" Callaway - 1.0-0.5.RC3 - really rebuild against R 2.6.1 - versioned buildrequires for R * Mon Nov 26 2007 Tom "spot" Callaway - 1.0-0.4.RC3 - rebuild against R 2.6.1

References


[ 1 ] Bug #460658 - R: Insecure auxiliary /tmp file usage (symlink attack possible) https://bugzilla.redhat.com/show_bug.cgi?id=460658

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rpy' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: rpy
Product: Fedora 8
Version: 1.0.3
Release: 3.fc8
URL: https://sourceforge.net/projects/rpy/
Summary: Python interface to the R language

Topics%20covered

Topics Covered

security advisory moderate security issue Fedora rpy temp directory unsafe handling

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here