Privilege Escalation

ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. libreport provides an API for reporting different problems in...

Information Disclosure

ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. libreport provides an API for reporting different problems in...

[SECURITY] Fedora 29 Update: reportd-0.6.6-2.fc29

A D-Bus service that exports libreport functionality...

[SECURITY] Fedora 30 Update: reportd-0.6.6-2.fc30

A D-Bus service that exports libreport functionality...

Information Disclosure

libreport is vulnerable to information disclosure. Changes made by a user in files that are included in a crash report are discarded when the dump directory's files are reviewed during crash reporting. This allows remote attackers to obtain confidential information such as host names, IP addresse...

Information Disclosure

libreport is vulnerable to information disclosure. Changes made by a user in files that are included in a crash report are discarded when the dump directory's files are reviewed during crash reporting. This allows remote attackers to obtain confidential information such as host names, IP addresse...

Fedora 23 : abrt-2.7.0-2.fc23 / libreport-2.6.3-1.fc23 (2015-cc585b503f)

Security fix for CVE-2015-5302 abrt-2.7.0-2.fc23 - Fix broken problem details in abrt-cli/gnome-abrt abrt-2.7.0-1.fc23 - cli-ng: initial - bodhi: introduce wrapper for 'reporter-bugzilla -h' and 'abrt-bodhi' - handle-event: remove obsolete workaround - remove 'not needed' code - doc: change...

Fedora 21 : abrt-2.3.0-12.fc21 / libreport-2.3.0-10.fc21 (2015-6542ab6d3a)

Security fix for CVE-2015-5302 abrt-2.3.0-12.fc21 - doc: fix default DumpLocation in abrt.conf man page - bodhi: fix typo in error messages - abrt- dump-xorg: support Xorg log backtraces prefixed by EE libreport-2.3.0-10.fc21 - fix save users changes after reviewing dump dir files - Resolves...

Fedora 22 : abrt-2.6.1-6.fc22 / libreport-2.6.3-1.fc22 (2015-b81f7e1e86)

Security fix for CVE-2015-5302 abrt-2.6.1-6.fc22 - doc: fix default DumpLocation in abrt.conf man page - abrt-retrace-client: use atoll for size conversion - a-a-a-ccpp-local don't delete buildids - abrt-dump-xorg: support Xorg log backtraces prefixed by EE - bodhi: fix typo in error messages...

Scientific Linux Security Update : abrt and libreport on SL7.x x86_64 (20151123)

It was found that the ABRT debug information installer abrt-action- install-debuginfo-to-abrt-cache did not use temporary directories in a secure way. A local attacker could use the flaw to create symbolic links and files at arbitrary locations as the abrt user. CVE-2015-5273 It was discovered th...

libreport信息泄露漏洞

No description provided by source...

libreport information disclosure vulnerability

libreport is a set of components developed in DotNET1.1 environment using C language for establishing master-slave relationships, grouping reports. A security vulnerability exists in libreport before 2.6.3 and version 2.0.7. Since the program only saves changes to the first file when editing a...

CVE-2015-5302

libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the 1 backtrace, 2 cmdline, 3 environ, 4 openfds, 5 maps, 6 smaps, 7 hostname, 8 remote, 9 ks.cfg, or 10...

CVE-2015-5302

CVE-2015-5302 details (libreport) : Affects libreport up to version 2.0.7 prior to 2.6.3. The flaw occurs when editing a crash report, where only changes to the first file are saved, potentially exposing sensitive information via crash report attachments. The documented sensitive data includes fi...

CVE-2015-5302

libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the 1 backtrace, 2 cmdline, 3 environ, 4 openfds, 5 maps, 6 smaps, 7 hostname, 8 remote, 9 ks.cfg, or 10...

CentOS Update for libreport CESA-2015:2504 centos6

Check the version of libreport SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882332";...

CentOS 6 : libreport (CESA-2015:2504)

Updated libreport packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

libreport security update

CentOS Errata and Security Advisory CESA-2015:2504 Updated libreport packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, whi...

CentOS 7 : abrt / libreport (CESA-2015:2505)

Updated abrt and libreport packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

abrt, libreport security update

CentOS Errata and Security Advisory CESA-2015:2505 Updated abrt and libreport packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...