drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in setroubleshoot
Name: |
Ausführen beliebiger Kommandos in setroubleshoot |
|
ID: |
FEDORA-2016-047a86f5b1 |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 24 |
|
Datum: |
Do, 23. Juni 2016, 23:28 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4446 |
|
Applikationen: |
setroubleshoot |
|
Originalnachricht |
Name : setroubleshoot Product : Fedora 24 Version : 3.3.9.1 Release : 1.fc24 URL : https://fedorahosted.org/setroubleshoot Summary : Helps troubleshoot SELinux problems Description : setroubleshoot GUI. Application that allows you to view setroubleshoot-server messages. Provides tools to help diagnose SELinux problems. When AVC messages are generated an alert can be generated that will give information about the problem and help track its resolution. Alerts can be configured to user preference. The same tools can be run on existing log files.
------------------------------------------------------------------------------- - Update Information:
Security fix for CVE-2016-4446 ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #1339250 - CVE-2016-4446 setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin https://bugzilla.redhat.com/show_bug.cgi?id=1339250 ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update setroubleshoot' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/package-announce@lists.fedoraproject.org
|
|
|
|