Oval Definition:	oval:org.mitre.oval:def:23932
Revision Date: 2014-05-26 Version: 20 Title: ELSA-2012:0841: abrt, libreport, btparser, and python-meh security and bug fix update (Low) Description: The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2011-4088 CVE-2012-1106 ELSA-2012:0841-04 Platform(s): Oracle Linux 6 Product(s): abrt btparser libreport python-meh Definition Synopsis Oracle Linux 6.x AND rpm test python-meh is earlier than 0:0.12.1-3.el6 OR btparser-python is earlier than 0:0.16-3.el6 OR btparser is earlier than 0:0.16-3.el6 OR btparser-devel is earlier than 0:0.16-3.el6 OR abrt-desktop is earlier than 0:2.0.8-6.el6 OR abrt-gui is earlier than 0:2.0.8-6.el6 OR abrt is earlier than 0:2.0.8-6.el6 OR abrt-devel is earlier than 0:2.0.8-6.el6 OR abrt-addon-kerneloops is earlier than 0:2.0.8-6.el6 OR abrt-tui is earlier than 0:2.0.8-6.el6 OR abrt-addon-vmcore is earlier than 0:2.0.8-6.el6 OR abrt-addon-ccpp is earlier than 0:2.0.8-6.el6 OR abrt-addon-python is earlier than 0:2.0.8-6.el6 OR abrt-libs is earlier than 0:2.0.8-6.el6 OR abrt-cli is earlier than 0:2.0.8-6.el6 OR libreport-plugin-mailx is earlier than 0:2.0.9-5.el6 OR libreport-plugin-rhtsupport is earlier than 0:2.0.9-5.el6 OR libreport-gtk-devel is earlier than 0:2.0.9-5.el6 OR libreport-python is earlier than 0:2.0.9-5.el6 OR libreport-cli is earlier than 0:2.0.9-5.el6 OR libreport is earlier than 0:2.0.9-5.el6 OR libreport-plugin-reportuploader is earlier than 0:2.0.9-5.el6 OR libreport-newt is earlier than 0:2.0.9-5.el6 OR libreport-gtk is earlier than 0:2.0.9-5.el6 OR libreport-plugin-kerneloops is earlier than 0:2.0.9-5.el6 OR libreport-devel is earlier than 0:2.0.9-5.el6 OR libreport-plugin-logger is earlier than 0:2.0.9-5.el6 OR libreport-plugin-bugzilla is earlier than 0:2.0.9-5.el6
BACK