Red Hat Security Advisory: luci security, bug fix, and enhancement update

Fixed packages 2

Vulnerabilities 2

• Unscored —
  CVE-2013-4481

  Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the…

  Nov 23, 2013
• Unscored —
  CVE-2013-4482

  Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscri…

  Nov 23, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/luci.html#RHSA-2013-1603
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=878149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=880363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=883008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=886517
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=886576
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=917747
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=988998
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=990321
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1001835
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1001836
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1603.json
• report
  https://access.redhat.com/security/cve/CVE-2013-4481
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4481
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4481
• report
  https://access.redhat.com/security/cve/CVE-2013-4482
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4482
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4482