Red Hat Security AdvisoryRHSA-2015:2504
libreport security update
Released 2015-11-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libreport-2.0.9-25.el6_7, libreport-cli-2.0.9-25.el6_7, libreport-compat-2.0.9-25.el6_7 +10
- Red Hat Enterprise Linux Desktop Optional (v. 6) libreport-devel-2.0.9-25.el6_7, libreport-gtk-devel-2.0.9-25.el6_7, libreport-plugin-bugzilla-2.0.9-25.el6_7
- Red Hat Enterprise Linux HPC Node (v. 6) libreport-2.0.9-25.el6_7, libreport-cli-2.0.9-25.el6_7, libreport-compat-2.0.9-25.el6_7 +8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libreport-devel-2.0.9-25.el6_7, libreport-gtk-2.0.9-25.el6_7, libreport-gtk-devel-2.0.9-25.el6_7 +2
- Red Hat Enterprise Linux Server (v. 6) libreport-2.0.9-25.el6_7, libreport-2.0.9-25.el6_7.ppc, libreport-cli-2.0.9-25.el6_7 +12
- Red Hat Enterprise Linux Server Optional (v. 6) libreport-devel-2.0.9-25.el6_7, libreport-devel-2.0.9-25.el6_7.ppc, libreport-gtk-devel-2.0.9-25.el6_7 +2
- Red Hat Enterprise Linux Workstation (v. 6) libreport-2.0.9-25.el6_7, libreport-cli-2.0.9-25.el6_7, libreport-compat-2.0.9-25.el6_7 +10
- Red Hat Enterprise Linux Workstation Optional (v. 6) libreport-devel-2.0.9-25.el6_7, libreport-gtk-devel-2.0.9-25.el6_7, libreport-plugin-bugzilla-2.0.9-25.el6_7
Fixes 1 record
Priority LOW 28
libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the (1) backtrace, (2) cmdli…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02847 · Published 2015-12-07 · Fixed CWE-200
