Summary
abrt
[2.1.11-22.0.1]
- Drop libreport-rhel and libreport-plugin-rhtsupport requires
[2.1.11-22]
- do not open the build_ids file as the user abrt
- do not unlink failed and big user core files
- Related: #1212819, #1216973
[2.1.11-21]
- validate all D-Bus method arguments
- Related: #1214610
[2.1.11-20]
- remove the old dump directories during upgrade
- abrt-action-install-debuginfo-to-abrt-cache: sanitize arguments and umask
- fix race conditions and directory traversal issues in abrt-dbus
- use /var/spool/abrt instead of /var/tmp/abrt
- make the problem directories owned by root and the group abrt
- validate uploaded problem directories in abrt-handle-upload
- don't override files with user core dump files
- fix symbolic link and race condition flaws
- Resolves: #1211969, #1212819, #1212863, #1212869
- Resolves: #1214453, #1214610, #1216973, #1218583
libreport
[2.1.11-23.0.1]
- Update workflow xml for Oracle [18945470]
- Add oracle-enterprise.patch and oracle-enterprise-po.patch
- Remove libreport-plugin-rhtsupport and libreport-rhel
- Added orabug20390725.patch to remove redhat reference [bug 20390725]
- Added Bug20357383.patch to remove redhat reference [bug 20357383]
[2.1.11-23]
- do not open files outside a dump directory
- Related: #1217484
[2.1.11-22]
- switch the default dump dir mode to 0750
- harden against directory traversal, crafted symbolic links
- avoid race-conditions in dump dir opening
- Resolves: #1212096, #1217499, #1218610, #1217484
Fixed packages 41
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | abrt | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-addon-ccpp | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-addon-kerneloops | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-addon-pstoreoops | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-addon-python | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-addon-upload-watch | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-addon-vmcore | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-addon-xorg | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-cli | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-console-notification | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-dbus | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-desktop | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-devel | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-gui | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-gui-devel | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-gui-libs | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-libs | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-python | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-python-doc | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-retrace-client | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | abrt-tui | 0:2.1.11-22.0.1.el7_1 |
| Oracle Linux · 7 | libreport | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-anaconda | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-cli | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-compat | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-devel | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-filesystem | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-gtk | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-gtk-devel | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-newt | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-plugin-bugzilla | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-plugin-kerneloops | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-plugin-logger | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-plugin-mailx | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-plugin-reportuploader | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-plugin-ureport | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-python | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-rhel-anaconda-bugzilla | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-rhel-bugzilla | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-web | 0:2.1.11-23.0.1.el7_1 |
| Oracle Linux · 7 | libreport-web-devel | 0:2.1.11-23.0.1.el7_1 |
Vulnerabilities 8
-
Unscored —
The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demon…
-
Unscored —
The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in …
-
Unscored —
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of f…
-
Unscored —
daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-u…
-
Unscored —
abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary file…
-
Unscored —
Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write…
-
Unscored —
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly h…
-
Unscored —CVE-2015-3315 Public exploit
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impa…