TI-2011-03606 CVE-2011-4088 · GHSA-pvpf-wrvr-qvg2
ABRT might allow attackers to obtain sensitive information from crash reports.
Priority LOW 36
ABRT might allow attackers to obtain sensitive information from crash reports.
RHSA-2012:0841
abrt, libreport, btparser, and python-meh security and bug fix update
Released 2012-06-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) abrt-2.0.8-6.el6, abrt-addon-ccpp-2.0.8-6.el6, abrt-addon-kerneloops-2.0.8-6.el6 +18
- Red Hat Enterprise Linux Desktop Optional (v. 6) abrt-2.0.8-6.el6, abrt-addon-vmcore-2.0.8-6.el6, abrt-devel-2.0.8-6.el6 +7
- Red Hat Enterprise Linux HPC Node (v. 6) abrt-2.0.8-6.el6, abrt-addon-ccpp-2.0.8-6.el6, abrt-addon-kerneloops-2.0.8-6.el6 +13
- Red Hat Enterprise Linux HPC Node Optional (v. 6) abrt-2.0.8-6.el6, abrt-addon-vmcore-2.0.8-6.el6, abrt-desktop-2.0.8-6.el6 +12
- Red Hat Enterprise Linux Server (v. 6) abrt-2.0.8-6.el6, abrt-addon-ccpp-2.0.8-6.el6, abrt-addon-kerneloops-2.0.8-6.el6 +21
- Red Hat Enterprise Linux Server Optional (v. 6) abrt-2.0.8-6.el6, abrt-addon-vmcore-2.0.8-6.el6, abrt-devel-2.0.8-6.el6 +12
- Red Hat Enterprise Linux Workstation (v. 6) abrt-2.0.8-6.el6, abrt-addon-ccpp-2.0.8-6.el6, abrt-addon-kerneloops-2.0.8-6.el6 +18
- Red Hat Enterprise Linux Workstation Optional (v. 6) abrt-2.0.8-6.el6, abrt-addon-vmcore-2.0.8-6.el6, abrt-devel-2.0.8-6.el6 +7
Fixes 2 records
TI-2012-01012 CVE-2012-1106 · GHSA-rph2-33pr-67ww
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier…
Priority LOW 11
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option i…