The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-tuiUpgrade libreport-rhel-bugzillaUpgrade abrt-console-notificationUpgrade libreport-web-develUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-rhelUpgrade abrt-dbusUpgrade abrt-addon-upload-watchUpgrade libreport-gtkUpgrade libreport-centosUpgrade abrt-retrace-clientUpgrade libreport-plugin-reportuploaderUpgrade libreport-develUpgrade abrt-addon-vmcoreUpgrade abrt-cliUpgrade libreport-cliUpgrade libreport-pythonUpgrade libreport-plugin-loggerUpgrade libreport-plugin-mantisbtUpgrade abrt-guiUpgrade libreport-newtUpgrade libreport-webUpgrade libreport-plugin-ureportUpgrade abrt-addon-ccppUpgrade abrt-addon-kerneloopsUpgrade libreportUpgrade abrt-desktopUpgrade abrtUpgrade abrt-gui-develUpgrade abrt-develUpgrade libreport-plugin-rhtsupportUpgrade libreport-filesystemUpgrade libreport-anacondaUpgrade libreport-compatUpgrade abrt-python-docUpgrade abrt-libsUpgrade abrt-addon-pythonUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-xorgUpgrade abrt-gui-libsUpgrade libreport-gtk-develUpgrade libreport-plugin-mailxUpgrade libreport-plugin-bugzillaUpgrade abrt-pythonUpgrade abrt-addon-pstoreoops | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-pythonUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-vmcoreUpgrade abrt-addon-pythonUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-rhel-bugzillaUpgrade libreport-develUpgrade libreport-cliUpgrade libreport-plugin-ureportUpgrade abrt-guiUpgrade abrt-console-notificationUpgrade libreport-newtUpgrade libreport-gtkUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-upload-watchUpgrade abrt-retrace-clientUpgrade libreport-web-develUpgrade abrt-tuiUpgrade abrt-desktopUpgrade abrtUpgrade libreport-anacondaUpgrade abrt-develUpgrade libreport-filesystemUpgrade abrt-gui-libsUpgrade abrt-dbusUpgrade libreport-plugin-mailxUpgrade libreport-compatUpgrade abrt-libsUpgrade abrt-gui-develUpgrade libreport-webUpgrade abrt-cliUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-ccppUpgrade libreport-gtk-develUpgrade abrt-python-docUpgrade abrt-addon-xorgUpgrade libreport-plugin-kerneloopsUpgrade libreport-plugin-loggerUpgrade libreport-plugin-bugzillaUpgrade libreportUpgrade abrt-python | Oct 16, 2024 | Jan 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub