Red Hat Security AdvisoryRHSA-2013:0215
abrt and libreport security update
Released 2013-01-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) abrt-2.0.8-6.el6_3.2, abrt-addon-ccpp-2.0.8-6.el6_3.2, abrt-addon-kerneloops-2.0.8-6.el6_3.2 +16
- Red Hat Enterprise Linux Desktop Optional (v. 6) abrt-2.0.8-6.el6_3.2, abrt-addon-vmcore-2.0.8-6.el6_3.2, abrt-devel-2.0.8-6.el6_3.2 +4
- Red Hat Enterprise Linux HPC Node (v. 6) abrt-2.0.8-6.el6_3.2, abrt-addon-ccpp-2.0.8-6.el6_3.2, abrt-addon-kerneloops-2.0.8-6.el6_3.2 +12
- Red Hat Enterprise Linux HPC Node Optional (v. 6) abrt-2.0.8-6.el6_3.2, abrt-addon-vmcore-2.0.8-6.el6_3.2, abrt-desktop-2.0.8-6.el6_3.2 +8
- Red Hat Enterprise Linux Server (v. 6) abrt-2.0.8-6.el6_3.2, abrt-addon-ccpp-2.0.8-6.el6_3.2, abrt-addon-kerneloops-2.0.8-6.el6_3.2 +19
- Red Hat Enterprise Linux Server Optional (v. 6) abrt-2.0.8-6.el6_3.2, abrt-addon-vmcore-2.0.8-6.el6_3.2, abrt-devel-2.0.8-6.el6_3.2 +7
- Red Hat Enterprise Linux Workstation (v. 6) abrt-2.0.8-6.el6_3.2, abrt-addon-ccpp-2.0.8-6.el6_3.2, abrt-addon-kerneloops-2.0.8-6.el6_3.2 +16
- Red Hat Enterprise Linux Workstation Optional (v. 6) abrt-2.0.8-6.el6_3.2, abrt-addon-vmcore-2.0.8-6.el6_3.2, abrt-devel-2.0.8-6.el6_3.2 +4
Fixes 2 records
Priority LOW 30
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the di…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00313 · Published 2013-03-12 · Fixed CWE-264
Priority LOW 18
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by mod…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00446 · Published 2013-03-12 · Fixed
