Fedora 8 : gallery2-2.2.5-1.fc8 (2008-5479)

High Nessus Plugin ID 33236


The remote Fedora host is missing a security update.


- Wed Jun 18 2008 John Berninger <john at ncphotography dot com> - 2.2.5-1

- update to upstream 2.2.5 for security vulns

- Thu Mar 20 2008 John Berninger <john at ncphotography dot com> - 2.2.4-3

- revert to SVN snapshot so that config-time integrity checks don't fail

- remove embedded copy of smarty and use php-Smarty package

- Sat Dec 29 2007 John Berninger <john at ncphotography dot com) - 2.2.4-2

- BZ 279961 - allow FileInfo

- Mon Dec 24 2007 Lubomir Kundrak <lkundrak at redhat.com> 2.2.4-1

- A christmas present -- critical security update to 2.2.4

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.


Update the affected gallery2 package.

See Also



Plugin Details

Severity: High

ID: 33236

File Name: fedora_2008-5479.nasl

Version: $Revision: 1.14 $

Type: local

Agent: unix

Published: 2008/06/24

Modified: 2016/12/08

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:gallery2, cpe:/o:fedoraproject:fedora:8

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2008/06/20

Reference Information

CVE: CVE-2008-2720, CVE-2008-2721, CVE-2008-2722, CVE-2008-2723, CVE-2008-2724

BID: 29681

FEDORA: 2008-5479

CWE: 79, 200, 264