zope: potential code execution

Posted Apr 22, 2004 15:52 UTC (Thu) by tseaver (subscriber, #1544) [Link]

This is hardly a "new" issue; it is more than a year and a half old, with the originial RedHat :

http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert

The original RedHat SA, dated 2002/09/25, on this was covered in LWN:

http://lwn.net/Alerts/10836/

including the LWN security page for that week:

http://lwn.net/Articles/10845/

My comments at the time on the Red Hat report at that time indicated that
*only* the issue now corrected by Debian was even current at that time.