Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 580
Alerts This Week
Warning Icon 1 580

Fedora 22: 2015-b81f7e1e86 Moderate: libreport Data Leak Fix

fedora
Calendar Grey October 28, 2015
Dist Fedora Esm H88
A vital patch for libreport has been deployed on Fedora 22 to resolve CVE-2015-5302, aimed at reducing the chances of unauthorized access to sensitive information.
Security fix for CVE-2015-5302 abrt-2.6.1-6.fc22 - doc: fix default DumpLocation in abrt.conf man page - abrt-retrace-client: use atoll for _size conversion - a-a-a-ccpp-local don'...

Summary

Libraries providing API for reporting different problems in applications

to different bug targets like Bugzilla, ftp, trac, etc...

Update Information:

Security fix for CVE-2015-5302 abrt-2.6.1-6.fc22 - doc: fix default DumpLocation in abrt.conf man page - abrt-retrace-client: use atoll for _size conversion - a-a-a-ccpp-local don't delete build_ids - abrt-dump-xorg: support Xorg log backtraces prefixed by (EE - bodhi: fix typo in error messages libreport-2.6.3-1.fc22 - reporter-bugzilla: add parameter -p - fix save userschanges after reviewing dump dir files - bugzilla: don't attach build_ids - rewrite event rule parser - ureport: improve curl's error messages - curl: add posibility to use own Certificate Authority cert - Resolves CVE-2015-5302

Change Log

References


[ 1 ] Bug #1270903 - CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT https://bugzilla.redhat.com/show_bug.cgi?id=1270903

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libreport' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: libreport
Product: Fedora 22
Version: 2.6.3
Release: 1.fc22
Summary: Generic library for reporting various problems

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.