setroubleshoot-3.0.47-6.1.0.1.AXS4

エラータID: AXSA:2015-107:01

Release date: 
Tuesday, April 14, 2015 - 16:35
Subject: 
setroubleshoot-3.0.47-6.1.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Description:
setroubleshoot GUI. Application that allows you to view setroubleshoot-server
messages.
Provides tools to help diagnose SELinux problems. When AVC messages
are generated an alert can be generated that will give information
about the problem and help track its resolution. Alerts can be configured
to user preference. The same tools can be run on existing log files.

Security issues fixed with this release:

CVE-2015-1815
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update package.

CVEs: 
CVE-2015-1815
The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.
Additional Info: 

N/A

Download: 

SRPMS
  1. setroubleshoot-3.0.47-6.1.0.1.AXS4.src.rpm
    MD5: 6066b74b939696ccebc0a67082007061
    SHA-256: 47157a6024738a39cc5a61e23ac8efe2b5bda22e47707690cde5ff107fef68bc
    Size: 1.51 MB

Asianux Server 4 for x86
  1. setroubleshoot-3.0.47-6.1.0.1.AXS4.i686.rpm
    MD5: 91039ce4f17b77f3cdd4a6d77c6d997f
    SHA-256: 2c2af22c39c4dae9e291b2a89327c2f9a521eccabb7818bbca651645555a0e1e
    Size: 117.65 kB
  2. setroubleshoot-server-3.0.47-6.1.0.1.AXS4.i686.rpm
    MD5: f1022aac4266889e1dd5124e0e5b7248
    SHA-256: 24ca280fc01e28cac2543ec6544bdd9d9ec0fd99d45ac8aa87b1c0bbf739d725
    Size: 1.29 MB

Asianux Server 4 for x86_64
  1. setroubleshoot-3.0.47-6.1.0.1.AXS4.x86_64.rpm
    MD5: f295a5de738b9761fe008a73c4d6b27d
    SHA-256: f9691aac2415dfd875d35cafe9c8744612ef3b5a31c0db8da6bab01b9fb0d847
    Size: 117.69 kB
  2. setroubleshoot-server-3.0.47-6.1.0.1.AXS4.x86_64.rpm
    MD5: 876a381cc4c9459601ecef8280bfd2f4
    SHA-256: fa97ee8d334d85f8b06be9ca243b42a7cbb884ebc39abc6f132fb26c162f5683
    Size: 1.29 MB