FEDORA-2015-b81f7e1e86 — security update for abrt and libreport

stable

abrt-2.6.1-6.fc22 and libreport-2.6.3-1.fc22

FEDORA-2015-b81f7e1e86 created by mhabrnal 9 years ago for Fedora 22

Security fix for CVE-2015-5302

abrt-2.6.1-6.fc22

doc: fix default DumpLocation in abrt.conf man page
abrt-retrace-client: use atoll for _size conversion
a-a-a-ccpp-local don't delete build_ids
abrt-dump-xorg: support Xorg log backtraces prefixed by (EE
bodhi: fix typo in error messages

libreport-2.6.3-1.fc22

reporter-bugzilla: add parameter -p
fix save users changes after reviewing dump dir files
bugzilla: don't attach build_ids
rewrite event rule parser
ureport: improve curl's error messages
curl: add posibility to use own Certificate Authority cert
Resolves CVE-2015-5302

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-b81f7e1e86

This update has been submitted for testing by mhabrnal.

9 years ago

This update has been pushed to testing.

9 years ago

filiperosset commented & provided feedback 9 years ago

karma

no regressions noted

greg18 commented & provided feedback 9 years ago

no regressions noited AFAICT

greg18 commented & provided feedback 9 years ago

karma

forgotten to Karma also :D

This update has been submitted for stable by bodhi.

9 years ago

mhayden commented & provided feedback 9 years ago

karma

Works for me.

This update has been pushed to stable.

9 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

Builds

abrt-2.6.1-6.fc22

libreport-2.6.3-1.fc22

BZ#1270903 CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT

BZ#1272355 CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT [fedora-all]

abrt-2.6.1-6.fc22

libreport-2.6.3-1.fc22

Automated Test Results

None

Test Cases


0	0	Test Case QA:Obsolete Testcase ABRT Actions and Reporters
0	0	Test Case ABRT Application restart
0	0	Test Case ABRT BlackList
0	0	Test Case ABRT Bugzilla plugin
0	0	Test Case ABRT CCPP addon
0	0	Test Case ABRT CLI
0	0	Test Case ABRT CLI Localized
0	0	Test Case ABRT Configuration Storage
0	0	Test Case ABRT Cron
0	0	Test Case ABRT Desktop auto-reporting
0	0	Test Case ABRT GPG Keys
0	0	Test Case ABRT GPG check
0	0	Test Case ABRT GUI Localized
0	0	Test Case ABRT GUI MAIN
0	0	Test Case ABRT GUI Translation
0	0	Test Case ABRT Logger plugin
0	0	Test Case ABRT Mailx plugin
0	0	Test Case ABRT Plugins
0	0	Test Case ABRT RemoveSecurityInformation
0	0	Test Case ABRT Reporting Known Crash
0	0	Test Case ABRT SELinux
0	0	Test Case ABRT ccpp-journal
0	0	Test Case ABRT cnotify
0	0	Test Case ABRT containers
0	0	Test Case ABRT kernel addon
0	0	Test Case ABRT kernel-journal
0	0	Test Case ABRT python addon
0	0	Test Case ABRT python better debugging
0	0	Test Case ABRT python3
0	0	Test Case ABRT quota
0	0	Test Case ABRT ruby gem
0	0	Test Case ABRT server
0	0	Test Case ABRT sosreport
0	0	Test Case ABRT third party event extension
0	0	Test Case ABRT vmcore
0	0	Test Case ABRT vmcores
0	0	Test Case GNOME ABRT MAIN
0	0	Test Case Libreport Anaconda Install
0	0	Test Case Libreport anaconda
0	0	Test Case Libreport firstboot
0	0	Test Case Libreport sealert
0	0	Test Case Retrace Server CLI
0	0	Test Case Retrace Server GUI