----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
Fedora update for python-cherrypy

SECUNIA ADVISORY ID:
SA28353

VERIFY ADVISORY:
http://secunia.com/advisories/28353/

CRITICAL:
Moderately critical

IMPACT:
Security Bypass

WHERE:
>From remote

OPERATING SYSTEM:
Fedora 8
http://secunia.com/product/16769/
Fedora 7
http://secunia.com/product/15552/

DESCRIPTION:
Fedora has issued an update for python-cherrypy. This fixes a
vulnerability, which can be exploited by malicious people to bypass
certain security restrictions.

For more information:
SA28354

SOLUTION:
Apply updated packages.

-- Fedora 7 --

f0bd4884eeacc263cc66c6c56fdf7a00702afc4e
python-cherrypy-2.2.1-8.fc7.noarch.rpm
69483afe8a3a2319701496ff5cb17a9f5d4e534d
python-cherrypy-2.2.1-8.fc7.src.rpm

-- Fedora 8 --

bf5bdd1fd51546d1b5ac096f71265ef31f8f910d
python-cherrypy-2.2.1-8.fc8.noarch.rpm
7b3d6bac94ed59f2e4b5c3a4c780f53d6fa8fd57
python-cherrypy-2.2.1-8.fc8.src.rpm

ORIGINAL ADVISORY:
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00297.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00240.html

OTHER REFERENCES:
SA28354:
http://secunia.com/advisories/28354/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------