Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 580
Alerts This Week
Warning Icon 1 580

Fedora 22 abrt Security Update: Critical Data Leak Fix for CVE-2015-5302

fedora
Calendar Grey October 28, 2015
Dist Fedora Esm H88
Important security patch for Fedora 22 tackles CVE-2015-5302 in abrt. Key modifications implemented to safeguard user information.
Security fix for CVE-2015-5302 abrt-2.6.1-6.fc22 - doc: fix default DumpLocation in abrt.conf man page - abrt-retrace-client: use atoll for _size conversion - a-a-a-ccpp-local don'...

Summary

abrt is a tool to help users to detect defects in applications and

to create a bug report with all information needed by maintainer to fix it.

It uses plugin system to extend its functionality.

Update Information:

Security fix for CVE-2015-5302 abrt-2.6.1-6.fc22 - doc: fix default DumpLocation in abrt.conf man page - abrt-retrace-client: use atoll for _size conversion - a-a-a-ccpp-local don't delete build_ids - abrt-dump-xorg: support Xorg log backtraces prefixed by (EE - bodhi: fix typo in error messages libreport-2.6.3-1.fc22 - reporter-bugzilla: add parameter -p - fix save userschanges after reviewing dump dir files - bugzilla: don't attach build_ids - rewrite event rule parser - ureport: improve curl's error messages - curl: add posibility to use own Certificate Authority cert - Resolves CVE-2015-5302

Change Log

References


[ 1 ] Bug #1270903 - CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT https://bugzilla.redhat.com/show_bug.cgi?id=1270903

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update abrt' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: abrt
Product: Fedora 22
Version: 2.6.1
Release: 6.fc22
Summary: Automatic bug detection and reporting tool

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.