sos-3.2-35.3.0.1.el7.AXS7

エラータID: AXSA:2016-110:01

Release date: 
Thursday, February 18, 2016 - 16:22
Subject: 
sos-3.2-35.3.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

Sos is a set of tools that gathers information about system
hardware and configuration. The information can then be used for
diagnostic purposes and debugging. Sos is commonly used to help
support technicians and developers.

Security issues fixed with this release:

CVE-2015-7529
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Fixed bugs:

* Previously, the sosreport tool was not collecting the /var/lib/ceph and /var/run/ceph directories when run with the ceph plug-in enabled, causing the generated sosreport archive to miss vital troubleshooting information about ceph. With this update, the ceph plug-in for sosreport collects these directories, and the generated report contains more useful information.

Solution: 

Update packages.

CVEs: 
CVE-2015-7529
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.
Additional Info: 

N/A

Download: 

SRPMS
  1. sos-3.2-35.3.0.1.el7.AXS7.src.rpm
    MD5: c9ff23b7287bd81ed1304c50df556b96
    SHA-256: 50a8e3432bdfc298ec8d6587aad4470c1088baea8fe4e2fc661306d2d0d030ae
    Size: 305.17 kB

Asianux Server 7 for x86_64
  1. sos-3.2-35.3.0.1.el7.AXS7.noarch.rpm
    MD5: 06eefd8bf8bc3f6c63bec33aaccb2888
    SHA-256: fe3bf3dd371957fb67e625806dc53137fb56f2a2bb2b6939d8461cd6158a9f3c
    Size: 315.46 kB