Stay Secure with the Latest Linux Advisories

security advisoryFedorasecurity fix

Fedora 23: 2015-cc585b503f Moderate: ABRT Data Leak Issue

Security fix for CVE-2015-5302 abrt-2.7.0-2.fc23 - Fix broken problem details in abrt-cli/gnome-abrt abrt-2.7.0-1.fc23 - cli-ng: initial - bodhi: introduce wrapper for 'reporter-bugzilla -h' and 'abrt-bodhi' - handle-event: remove obsolete workaround - remove 'not needed' code - doc: change /var/tmp/abrt to /var/spool/abrt - doc: fix default DumpLocation in abrt.conf man page - abrt-. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-cc585b503f 2015-10-31 16:04:40.593977 -------------------------------------------------------------------------------- Name : abrt Product : Fedora 23 Version : 2.7.0 Release : 2.fc23 URL : https://abrt.readthedocs.io/en/latest/ Summary : Automatic bug detection and reporting tool Description : abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-5302 abrt-2.7.0-2.fc23 - Fix broken problem details in abrt-cli/gnome-abrt abrt-2.7.0-1.fc23 - cli-ng: initial - bodhi: introduce wrapper for 'reporter-bugzilla -h' and 'abrt-bodhi' - handle-event: remove obsolete workaround - remove 'not needed' code - doc: change /var/tmp/abrt to /var/spool/abrt - doc: fix default DumpLocation in abrt.conf man page - abrt- dump-xorg: support Xorg log backtraces prefixed by (EE) - Resolves #1264739 libreport-2.6.3-1.fc23 - reporter-bugzilla: add parameter -p - fix save userschanges after reviewing dump dir files - bugzilla: don't attach build_ids - rewrite event rule parser - ureport: improve curl's error messages - curl: add posibility to use own Certificate Authority cert - Resolves #1270235, CVE-2015-5302 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1270903 -CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT https://bugzilla.redhat.com/show_bug.cgi?id=1270903 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update abrt' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Critical vulnerability fix for Fedora 23's abrt utility, resolving possible data exposure problems. Click here for the complete update information.. Fedora 23 Update, abrt Tool Fix, Data Leak Patch. . LinuxSecurity.com Team

Oct 31, 2015 Fedora