btparser-0.17-1.AXS4, abrt-2.0.8-15.0.1.AXS4, libreport-2.0.9-15.0.2.AXS4

• abrt: abrt is a tool to help users to detect defects in applications and to create a bug report with all informations needed by maintainer to fix it. It uses plugin system to extend its functionality.

• libreport: Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

• btparser: Btparser is a backtrace parser and analyzer, which works with backtraces produced by the GNU Project Debugger. It can parse a text file with a backtrace to a tree of C structures, allowing to analyze the threads and frames of the backtrace and work with them.
Btparser also contains some backtrace manipulation and extraction routines:
   – it can find a frame in the crash-time backtrace where the program most likely crashed (a chance is that the function described in that frame is buggy)
   – it can produce a duplication hash of the backtrace, which helps to discover that two crash-time backtraces are duplicates, triggered by the same flaw of the code
   – it can "rate" the backtrace quality, which depends on the number of frames with and without the function name known (missing function name is caused by missing debugging symbols)

Security issues fixed with this release:

• CVE-2012-5659
Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

• CVE-2012-5660
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."

Fixed bugs:

abrt
• more multilib fixes
• rebuild because of broken brew builder
• Prevent daemon from being stuck (unresponsive to socket connects) while post-create even runs
• Prevent infinite loop of crashes
• don't follow symlinks
• fixed possible deadlock in abrt daemon
• fixed relro flags
• fixed the undefined weak symbols
• updated translation
• hopefully fixed ugly applet icon
• abrt-install-ccpp-hook: fix the check for %e presense
• abrt-harvest-vmcore: add CopyVMcore config option to copy vmcores.
• fixed problems discovered by brewtap
• don't try to run dbus-send if it's not installed
• [abrt] abrt-addon-ccpp-2.0.7-4.fc17: abrt-action-analyze-core:106:extract_info_from_core:IndexError: list index out of range
• abrt-addon-python: The process might hang forever if no one collects the dump it sends
• Reporting may fail with: "abrt-bodhi: command not found"
• too strict check for tainted kernel rhbz#814594 - "abrt-ccpp status" returned no status messages
• abrt missing dependency: libreport-plugin-bugzilla
• abrt-addon-python: The process might hang forever if no one collects the dump it sends
• don't remove new problems from abrt-upload directory

libreport
• rebuilding beacause of failed rpmdiff - no changes
• in same cases we have to follow symlinks
• don't follow symlinks
• fixed relro flags
• removed confusing warning message
• added versioned requirements to silence rpmdiff
• removed reporter-bugzilla from config file re-added by mistake
• updated translation
• fixed brewtap warnings
• silence few rpmdiff warnings
• don't show the user credentials in logs
• use the default template for bz reports
• fix adding users to CC in bugzilla
• don't warn about daemon connection when deleting a problem
• ignore non problem dirs when cleaning old problems
• opt kernel out of showing smolt information in abrt bug reports.
• ABRT mailx plugin on by default causes crashes being always labelled as reported
• pkg-config --cflags libreport includs -fPIC
• Coverity revealed memory leaks and possibly other issues
• GLib warnings by report-gtk when crash dir does not exist
• `report' tool requires current working directory to be a crash dir
• Searching for duplicate anaconda bugs while reporting exception against partner-bugzilla during install fails
• Undefined non-weak symbols
• ABRT has wrong URL in dialog

btparser
• New upstream release