Summary
[3.2-35.0.1.3]
- Recreated patch for [orabug 18913115]
- Make the selinux plugin fixfiles option useful (John Haxby) [orabug 18913115]
- Added remove_gpgstring.patch [Bug 18313898]
- Added sos-oracle-enterprise.patch
- Added sos-oraclelinux-vendor-vendorurl.patch
[= 3.2-37]
- [sosreport] prepare report in a private subdirectory (updated)
Resolves: bz1290954
[= 3.2-35.2]
- [sosreport] prepare report in a private subdirectory (updated)
Resolves: bz1290954
[= 3.2-35.1]
- [ceph] collect /var/lib/ceph and /var/run/ceph
Resolves: bz1291347
- [sosreport] prepare report in a private subdirectory
Resolves: bz1290954
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | sos | 0:3.2-35.0.1.el7_2.3 |
Vulnerabilities 1
-
High 7.8
SoSReport Predictable Tmp File Names
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$dat…