Description
The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | abrt +20 | 2.1.11-22.ael7b_1 | RHSA-2015:1083 |
| RHEL 7 | libreport +21 | 2.1.11-23.ael7b_1 | RHSA-2015:1083 |
| RHEL 6 | abrt +12 | 2.0.8-26.el6_6.1 | RHSA-2015:1210 |
| RHEL 6 | libreport +14 | 2.0.9-21.el6_6.1 | RHSA-2015:1210 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | abrt +20 | 2.1.11-22.0.1.el7_1 | ELSA-2015-1083 |
| Oracle Linux 7 | libreport +19 | 2.1.11-23.0.1.el7_1 | ELSA-2015-1083 |
Advisories 3
- RHSA-2015:1210 Red Hat Security Advisory: abrt security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2015:1083 Red Hat Security Advisory: abrt security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- ELSA-2015-1083 Important: abrt security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jun 9, 2015
References
- RHSA-2015:1083 vendor-advisory
- 75119 vdb-entry
- https://github.com/abrt/abrt/commit/7d023c32a565e83306cddf34c894477b7aaf33d1
- RHSA-2015:1210 vendor-advisory
- https://github.com/abrt/libreport/commit/c962918bc70a61a8cc647898ee8b1ff1c14a87c5
- https://bugzilla.redhat.com/show_bug.cgi?id=1212868
- https://github.com/abrt/abrt/commit/8939398b82006ba1fec4ed491339fc075f43fc7c