Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 22 gnome-abrt Security Advisory: Critical System Issue Resolved

fedora
Calendar Grey June 21, 2015
Dist Fedora Esm H88
Strengthen your system's defenses by applying the latest Fedora 22 updates, especially the gnome-abrt patch that fixes critical vulnerabilities and enhances control
Security fixes for: * CVE-2015-3315 * CVE-2015-3142 * CVE-2015-1869 * CVE-2015-1870

Summary

A GNOME application allows users to browse through detected problems and

provides them with convenient way for managing these problems.

Update Information:

Security fixes for: * CVE-2015-3315 * CVE-2015-3142 * CVE-2015-1869 * CVE-2015-1870 * CVE-2015-3151 * CVE-2015-3150 * CVE-2015-3159

abrt: - Move the default dump location from /var/tmp/abrt to /var/spool/abrt - Use root for owner of all dump directories - Stop reading hs_error.log from /tmp - Don not save the system logs by default - Don not save dmesg if kernel.dmesg_restrict=1

libreport: - Harden the code against directory traversal, symbolic and hard link attacks - Fix a bug causing that the first value of AlwaysExcludedElements was ignored - Fix missing icon for the "Stop" button icon name - Improve development documentation - Translations updates

gnome-abrt: - Enabled the Details also for the System problems - Do not crash in the testing of availabitlity of XServer - Fix 'Open problem's data directory' - Quit Application on Ctrl+Q - Translation updates

satyr: - New kernel taint flags - More secure core stacktraces from core hook

Topics%20covered

Topics Covered

security advisory Fedora critical fix system improvement abrt

Change Log

* Tue Jun 9 2015 Jakub Filak 1.2.0-1 - Enabled the Details also for the System problems - Do not crash in the testing of availabitlity of XServer - Remove a debug print introduced with port to Python3 - Fix 'Open problem's data directory' - Quit Application on Ctrl+Q - Translation updates - Resolves: #1211759

References


[ 1 ] Bug #1216975 - CVE-2015-3159 abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1216975 [ 2 ] Bug #1214609 - CVE-2015-3150 abrt: abrt-dbus does not guard against crafted problem directory path arguments [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1214609 [ 3 ] Bug #1214452 - CVE-2015-3151 abrt: directory traversals in several D-Bus methods implemented by abrt-dbus [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1214452 [ 4 ] Bug #1212871 - CVE-2015-1870 abrt: default abrt event scripts lead to information disclosure [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1212871 [ 5 ] Bug #1212865 - CVE-2015-1869 abrt: default event scripts follow symbolic links [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1212865 [ 6 ] Bug #1212821 - CVE-2015-3142 abrt: abrt-hook-ccpp writes core dumps to exis...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update gnome-abrt' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gnome-abrt
Product: Fedora 22
Version: 1.2.0
Release: 1.fc22
URL: https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement
Summary: A utility for viewing problems that have occurred with the system

Topics%20covered

Topics Covered

security advisory Fedora critical fix system improvement abrt

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here