The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-addon-vmcoreUpgrade libreport-plugin-loggerUpgrade libreport-plugin-bugzillaUpgrade abrt-tuiUpgrade libreport-gtk-develUpgrade libreport-plugin-rhtsupportUpgrade libreport-pythonUpgrade abrt-develUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-kerneloopsUpgrade abrtUpgrade libreportUpgrade abrt-desktopUpgrade abrt-libsUpgrade libreport-plugin-mailxUpgrade libreport-plugin-kerneloopsUpgrade libreport-newtUpgrade libreport-cliUpgrade libreport-gtkUpgrade abrt-guiUpgrade libreport-develUpgrade abrt-addon-ccppUpgrade abrt-addon-pythonUpgrade abrt-cli | Dec 1, 2016 | Mar 12, 2013 |
| Oracle_linux | — | Upgrade libreport-newtUpgrade libreport-plugin-reportuploaderUpgrade libreport-plugin-loggerUpgrade libreport-gtkUpgrade abrtUpgrade libreport-pythonUpgrade abrt-tuiUpgrade abrt-libsUpgrade libreport-plugin-mailxUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-kerneloopsUpgrade abrt-guiUpgrade libreport-develUpgrade libreport-gtk-develUpgrade abrt-addon-pythonUpgrade abrt-cliUpgrade abrt-addon-ccppUpgrade abrt-desktopUpgrade abrt-develUpgrade libreport-plugin-bugzillaUpgrade libreportUpgrade abrt-addon-vmcoreUpgrade libreport-cli | Oct 16, 2024 | Mar 12, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub