Login
Login-Name Passwort


 
Newsletter
Werbung

Sicherheit: Ausführen beliebiger Kommandos in setroubleshoot
Aktuelle Meldungen Distributionen
Name: Ausführen beliebiger Kommandos in setroubleshoot
ID: FEDORA-2016-f597359bf2
Distribution: Fedora
Plattformen: Fedora 22
Datum: Mi, 29. Juni 2016, 23:18
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4446

Originalnachricht

Name        : setroubleshoot
Product : Fedora 22
Version : 3.2.27.1
Release : 1.fc22
URL : https://fedorahosted.org/setroubleshoot
Summary : Helps troubleshoot SELinux problems
Description :
setroubleshoot GUI. Application that allows you to view setroubleshoot-server
messages.
Provides tools to help diagnose SELinux problems. When AVC messages
are generated an alert can be generated that will give information
about the problem and help track its resolution. Alerts can be configured
to user preference. The same tools can be run on existing log files.

-------------------------------------------------------------------------------
-
Update Information:

Security fix for CVE-2016-4446
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1339250 - CVE-2016-4446 setroubleshoot-plugins: insecure
commands.getoutput use in the allow_execstack plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1339250
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update setroubleshoot' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce@lists.fedoraproject.org
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung