Red Hat Security AdvisoryRHSA-2015:2505
abrt and libreport security update
Released 2015-11-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) abrt-2.1.11-35.el7, abrt-addon-ccpp-2.1.11-35.el7, abrt-addon-kerneloops-2.1.11-35.el7 +27
- Red Hat Enterprise Linux Client Optional (v. 7) abrt-addon-upload-watch-2.1.11-35.el7, abrt-devel-2.1.11-35.el7, abrt-gui-devel-2.1.11-35.el7 +10
- Red Hat Enterprise Linux ComputeNode (v. 7) abrt-2.1.11-35.el7, abrt-addon-ccpp-2.1.11-35.el7, abrt-addon-kerneloops-2.1.11-35.el7 +24
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) abrt-addon-upload-watch-2.1.11-35.el7, abrt-desktop-2.1.11-35.el7, abrt-devel-2.1.11-35.el7 +13
- Red Hat Enterprise Linux Server (v. 7) abrt-2.1.11-35.el7, abrt-addon-ccpp-2.1.11-35.el7, abrt-addon-kerneloops-2.1.11-35.el7 +32
- Red Hat Enterprise Linux Server Optional (v. 7) abrt-addon-upload-watch-2.1.11-35.el7, abrt-devel-2.1.11-35.el7, abrt-devel-2.1.11-35.el7.ppc +15
- Red Hat Enterprise Linux Workstation (v. 7) abrt-2.1.11-35.el7, abrt-addon-ccpp-2.1.11-35.el7, abrt-addon-kerneloops-2.1.11-35.el7 +27
- Red Hat Enterprise Linux Workstation Optional (v. 7) abrt-addon-upload-watch-2.1.11-35.el7, abrt-devel-2.1.11-35.el7, abrt-gui-devel-2.1.11-35.el7 +10
Fixes 3 records
Priority CRITICAL 93KEV
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated b…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.05003 · Published 2015-12-07 · Fixed CWE-59
Priority LOW 28
libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the (1) backtrace, (2) cmdli…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02847 · Published 2015-12-07 · Fixed CWE-200
Priority LOW 19
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created direc…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00909 · Published 2015-12-07 · Fixed CWE-59
THREATIST.IORead the docs