Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 21 ABRT Security Update: CVE-2015-5302 Critical Fix

Security fix for CVE-2015-5302 abrt-2.3.0-12.fc21 - doc: fix default DumpLocation in abrt.conf man page - bodhi: fix typo in error messages - abrt- dump-xorg: support Xorg log backtraces prefixed by (EE libreport-2.3.0-10.fc21 - fix save users changes after reviewing dump dir files - Resolves CVE-2015-5302. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-6542ab6d3a 2015-11-26 04:57:38.195310 -------------------------------------------------------------------------------- Name : abrt Product : Fedora 21 Version : 2.3.0 Release : 12.fc21 URL : https://github.com/abrt/abrt/wiki/ABRT-Project Summary : Automatic bug detection and reporting tool Description : abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-5302 abrt-2.3.0-12.fc21 - doc: fix default DumpLocation in abrt.conf man page - bodhi: fix typo in error messages - abrt- dump-xorg: support Xorg log backtraces prefixed by (EE libreport-2.3.0-10.fc21 - fix save users changes after reviewing dump dir files - Resolves CVE-2015-5302 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1270903 - CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT https://bugzilla.redhat.com/show_bug.cgi?id=1270903 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update abrt' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Fedora 23 dnf security patch tackles CVE-2016-5752, enhancing error logging functionalities significantly.. Fedora Security, ABRT Tooling, Bug Reporting, Critical Fix, CVE-2015-5302. . Severity: Critical. LinuxSecurity.com Team

Nov 26, 2015 •Critical Fedora