The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-addon-kerneloopsUpgrade abrt-cliUpgrade abrt-gui-develUpgrade abrt-desktopUpgrade libreport-webUpgrade libreport-centosUpgrade abrt-guiUpgrade abrt-pythonUpgrade abrt-addon-ccppUpgrade abrt-addon-pythonUpgrade libreport-gtkUpgrade libreport-web-develUpgrade abrt-addon-xorgUpgrade libreport-plugin-kerneloopsUpgrade abrt-develUpgrade libreport-cliUpgrade abrt-python-docUpgrade abrt-dbusUpgrade libreportUpgrade libreport-gtk-develUpgrade libreport-plugin-mailxUpgrade libreport-plugin-rhtsupportUpgrade abrt-addon-pstoreoopsUpgrade abrt-libsUpgrade abrt-console-notificationUpgrade abrt-addon-vmcoreUpgrade abrt-retrace-clientUpgrade abrt-addon-upload-watchUpgrade libreport-rhel-bugzillaUpgrade abrt-gui-libsUpgrade abrt-tuiUpgrade libreport-plugin-reportuploaderUpgrade libreport-plugin-mantisbtUpgrade abrtUpgrade libreport-pythonUpgrade libreport-plugin-bugzillaUpgrade libreport-anacondaUpgrade libreport-rhelUpgrade libreport-filesystemUpgrade libreport-plugin-loggerUpgrade libreport-newtUpgrade libreport-develUpgrade libreport-plugin-ureportUpgrade libreport-compatUpgrade libreport-rhel-anaconda-bugzilla | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-develUpgrade abrt-pythonUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-loggerUpgrade abrt-guiUpgrade libreport-gtk-develUpgrade abrt-dbusUpgrade libreport-plugin-mailxUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-xorgUpgrade abrt-tuiUpgrade libreport-gtkUpgrade abrt-cliUpgrade abrt-addon-pythonUpgrade abrt-gui-develUpgrade libreport-compatUpgrade libreport-web-develUpgrade abrtUpgrade abrt-addon-kerneloopsUpgrade libreport-filesystemUpgrade libreportUpgrade libreport-plugin-ureportUpgrade abrt-addon-upload-watchUpgrade abrt-gui-libsUpgrade abrt-console-notificationUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-pstoreoopsUpgrade libreport-anacondaUpgrade libreport-plugin-reportuploaderUpgrade abrt-libsUpgrade abrt-desktopUpgrade abrt-python-docUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-develUpgrade libreport-plugin-kerneloopsUpgrade libreport-webUpgrade abrt-retrace-clientUpgrade abrt-addon-ccppUpgrade libreport-cliUpgrade libreport-newtUpgrade libreport-python | Oct 16, 2024 | Jun 26, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub