The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-cliUpgrade libreport-plugin-mailxUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-pythonUpgrade abrt-desktopUpgrade libreport-plugin-bugzillaUpgrade libreport-newtUpgrade libreport-develUpgrade abrt-develUpgrade abrt-libsUpgrade libreportUpgrade libreport-pythonUpgrade abrt-addon-kerneloopsUpgrade abrt-guiUpgrade abrt-tuiUpgrade libreport-plugin-loggerUpgrade libreport-plugin-rhtsupportUpgrade abrt-addon-vmcoreUpgrade abrt-addon-ccppUpgrade libreport-gtk-develUpgrade abrt-cliUpgrade libreport-plugin-kerneloopsUpgrade libreport-gtkUpgrade abrt | Dec 1, 2016 | Mar 12, 2013 |
| Oracle_linux | — | Upgrade libreport-cliUpgrade libreport-plugin-bugzillaUpgrade libreportUpgrade libreport-gtk-develUpgrade abrt-tuiUpgrade abrt-desktopUpgrade abrt-addon-pythonUpgrade libreport-gtkUpgrade libreport-develUpgrade abrt-libsUpgrade abrtUpgrade libreport-plugin-reportuploaderUpgrade abrt-guiUpgrade abrt-develUpgrade abrt-addon-ccppUpgrade libreport-newtUpgrade libreport-pythonUpgrade abrt-cliUpgrade abrt-addon-vmcoreUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-kerneloopsUpgrade libreport-plugin-loggerUpgrade libreport-plugin-mailx | Oct 16, 2024 | Mar 12, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub