Skip to content
OpenAdvisories
Medium 1 exploited CVE ELSA-2015-2505 3 CVEs

Moderate: abrt and libreport security update (Oracle Linux 7)

Published Nov 25, 2015 · Updated Nov 25, 2015

Summary

abrt
[2.1.11-35.0.1]
- Drop libreport-rhel and libreport-plugin-rhtsupport requires

[2.1.11-35]
- make /var/spool/abrt owned by root
- remove 'r' from /var/spool/abrt for other users
- abrt-action-install-debug-info: use secure temporary directory
- stop saving abrt's core files to /var/spool/abrt if DebugLevel < 1
- Fixes for: CVE-2015-5273 and CVE-2015-5287
- Resolves: #1266853

libreport
[2.1.11-31.0.1]
- Update workflow xml for Oracle [18945470]
- Add oracle-enterprise.patch and oracle-enterprise-po.patch
- Remove libreport-plugin-rhtsupport and libreport-rhel
- Added orabug20390725.patch to remove redhat reference [bug 20390725]
- Added Bug20357383.patch to remove redhat reference [bug 20357383]

[2.1.11-31]
- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Related: #1266853

Fixed packages 41

ReleasePackageFixed in
Oracle Linux · 7 abrt 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-addon-ccpp 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-addon-kerneloops 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-addon-pstoreoops 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-addon-python 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-addon-upload-watch 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-addon-vmcore 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-addon-xorg 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-cli 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-console-notification 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-dbus 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-desktop 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-devel 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-gui 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-gui-devel 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-gui-libs 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-libs 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-python 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-python-doc 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-retrace-client 0:2.1.11-35.0.1.el7
Oracle Linux · 7 abrt-tui 0:2.1.11-35.0.1.el7
Oracle Linux · 7 libreport 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-anaconda 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-cli 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-compat 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-devel 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-filesystem 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-gtk 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-gtk-devel 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-newt 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-plugin-bugzilla 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-plugin-kerneloops 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-plugin-logger 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-plugin-mailx 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-plugin-reportuploader 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-plugin-ureport 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-python 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-rhel-anaconda-bugzilla 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-rhel-bugzilla 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-web 0:2.1.11-31.0.1.el7
Oracle Linux · 7 libreport-web-devel 0:2.1.11-31.0.1.el7

Vulnerabilities 3

  • High 7.8
    CVE-2015-5287 Exploited Public exploit

    The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain per…

    KEV Aug 26, 2026
  • Unscored —
    CVE-2015-5273 Public exploit

    The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows…

  • Unscored —

    libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote atta…