The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users to gain privileges.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-pythonUpgrade abrt-addon-ccppUpgrade libreport-plugin-rhtsupportUpgrade libreport-plugin-mantisbtUpgrade abrt-cliUpgrade abrt-retrace-clientUpgrade libreport-plugin-bugzillaUpgrade libreport-anacondaUpgrade libreport-develUpgrade abrtUpgrade abrt-develUpgrade libreport-plugin-ureportUpgrade libreport-plugin-mailxUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-gui-libsUpgrade libreport-compatUpgrade abrt-dbusUpgrade libreport-plugin-kerneloopsUpgrade libreport-filesystemUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-reportuploaderUpgrade libreport-web-develUpgrade abrt-addon-pythonUpgrade abrt-addon-upload-watchUpgrade libreport-newtUpgrade libreport-rhel-bugzillaUpgrade libreport-gtk-develUpgrade abrt-libsUpgrade abrt-gui-develUpgrade libreport-rhelUpgrade libreport-plugin-loggerUpgrade libreportUpgrade libreport-gtkUpgrade abrt-tuiUpgrade libreport-webUpgrade abrt-desktopUpgrade abrt-pythonUpgrade abrt-console-notificationUpgrade abrt-addon-pstoreoopsUpgrade libreport-cliUpgrade abrt-addon-xorgUpgrade abrt-python-docUpgrade abrt-addon-vmcoreUpgrade libreport-centosUpgrade abrt-gui | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-console-notificationUpgrade abrt-pythonUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-pythonUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-upload-watchUpgrade libreport-develUpgrade abrt-develUpgrade abrt-addon-kerneloopsUpgrade libreport-cliUpgrade libreport-web-develUpgrade libreport-pythonUpgrade libreport-plugin-mailxUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-newtUpgrade libreport-rhel-bugzillaUpgrade abrt-retrace-clientUpgrade abrt-desktopUpgrade libreport-plugin-reportuploaderUpgrade abrt-libsUpgrade libreportUpgrade libreport-plugin-ureportUpgrade libreport-filesystemUpgrade libreport-webUpgrade abrt-gui-libsUpgrade abrtUpgrade abrt-addon-xorgUpgrade libreport-compatUpgrade libreport-gtk-develUpgrade abrt-addon-ccppUpgrade libreport-plugin-kerneloopsUpgrade abrt-python-docUpgrade libreport-plugin-loggerUpgrade abrt-gui-develUpgrade abrt-dbusUpgrade abrt-cliUpgrade abrt-guiUpgrade abrt-tuiUpgrade libreport-gtkUpgrade libreport-anacondaUpgrade abrt-addon-vmcore | Oct 16, 2024 | Jan 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub