--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4792
2015-03-28 23:38:55
--------------------------------------------------------------------------------

Name        : setroubleshoot
Product     : Fedora 22
Version     : 3.2.22
Release     : 1.fc22
URL         : https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement
Summary     : Helps troubleshoot SELinux problems
Description :
setroubleshoot GUI. Application that allows you to view setroubleshoot-server
messages.
Provides tools to help diagnose SELinux problems. When AVC messages
are generated an alert can be generated that will give information
about the problem and help track its resolution. Alerts can be configured
to user preference. The same tools can be run on existing log files.

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2015-1815
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1203352 - CVE-2015-1815 setroubleshoot: command injection via crafted file name
        https://bugzilla.redhat.com/show_bug.cgi?id=1203352
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update setroubleshoot' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/

Fedora 22: setroubleshoot Security Update

March 31, 2015
Security fix for CVE-2015-1815

Summary

setroubleshoot GUI. Application that allows you to view setroubleshoot-server

messages.

Provides tools to help diagnose SELinux problems. When AVC messages

are generated an alert can be generated that will give information

about the problem and help track its resolution. Alerts can be configured

to user preference. The same tools can be run on existing log files.

Update Information:

Security fix for CVE-2015-1815

Change Log

References

[ 1 ] Bug #1203352 - CVE-2015-1815 setroubleshoot: command injection via crafted file name https://bugzilla.redhat.com/show_bug.cgi?id=1203352

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update setroubleshoot' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : setroubleshoot
Product : Fedora 22
Version : 3.2.22
Release : 1.fc22
URL : https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement
Summary : Helps troubleshoot SELinux problems

Related News