Synopsis: Moderate: libreport security update
Advisory ID: SLSA-2015:2504-1
Issue Date: 2015-11-23
CVE Numbers: CVE-2015-5302
—
It was found that ABRT may have exposed unintended information to Red Hat
Bugzilla during crash reporting. A bug in the libreport library caused
changes made by a user in files included in a crash report to be
discarded. As a result, Bugzilla attachments may contain data that
was not intended to be made public, including host names, IP addresses, or
command line options. (CVE-2015-5302)
This flaw did not affect default installations of ABRT on Scientific Linux
as they do not post data to Red Hat Bugzilla.
—
SL6
x86_64
libreport-2.0.9-25.el6_7.i686.rpm
libreport-2.0.9-25.el6_7.x86_64.rpm
libreport-cli-2.0.9-25.el6_7.x86_64.rpm
libreport-compat-2.0.9-25.el6_7.x86_64.rpm
libreport-debuginfo-2.0.9-25.el6_7.i686.rpm
libreport-debuginfo-2.0.9-25.el6_7.x86_64.rpm
libreport-filesystem-2.0.9-25.el6_7.x86_64.rpm
libreport-gtk-2.0.9-25.el6_7.i686.rpm
libreport-gtk-2.0.9-25.el6_7.x86_64.rpm
libreport-newt-2.0.9-25.el6_7.x86_64.rpm
libreport-plugin-kerneloops-2.0.9-25.el6_7.x86_64.rpm
libreport-plugin-logger-2.0.9-25.el6_7.x86_64.rpm
libreport-plugin-mailx-2.0.9-25.el6_7.x86_64.rpm
libreport-plugin-reportuploader-2.0.9-25.el6_7.x86_64.rpm
libreport-plugin-rhtsupport-2.0.9-25.el6_7.x86_64.rpm
libreport-plugin-ureport-2.0.9-25.el6_7.x86_64.rpm
libreport-python-2.0.9-25.el6_7.x86_64.rpm
libreport-devel-2.0.9-25.el6_7.i686.rpm
libreport-devel-2.0.9-25.el6_7.x86_64.rpm
libreport-gtk-devel-2.0.9-25.el6_7.i686.rpm
libreport-gtk-devel-2.0.9-25.el6_7.x86_64.rpm
libreport-plugin-bugzilla-2.0.9-25.el6_7.x86_64.rpm
i386
libreport-2.0.9-25.el6_7.i686.rpm
libreport-cli-2.0.9-25.el6_7.i686.rpm
libreport-compat-2.0.9-25.el6_7.i686.rpm
libreport-debuginfo-2.0.9-25.el6_7.i686.rpm
libreport-filesystem-2.0.9-25.el6_7.i686.rpm
libreport-gtk-2.0.9-25.el6_7.i686.rpm
libreport-newt-2.0.9-25.el6_7.i686.rpm
libreport-plugin-kerneloops-2.0.9-25.el6_7.i686.rpm
libreport-plugin-logger-2.0.9-25.el6_7.i686.rpm
libreport-plugin-mailx-2.0.9-25.el6_7.i686.rpm
libreport-plugin-reportuploader-2.0.9-25.el6_7.i686.rpm
libreport-plugin-rhtsupport-2.0.9-25.el6_7.i686.rpm
libreport-plugin-ureport-2.0.9-25.el6_7.i686.rpm
libreport-python-2.0.9-25.el6_7.i686.rpm
libreport-devel-2.0.9-25.el6_7.i686.rpm
libreport-gtk-devel-2.0.9-25.el6_7.i686.rpm
libreport-plugin-bugzilla-2.0.9-25.el6_7.i686.rpm
– Scientific Linux Development Team
