RHBA-2015:2287Medium
Red Hat Bug Fix Advisory: setroubleshoot bug fix and enhancement update
🔗 CVE IDs covered (1)
📋 Description
CVE-2016-4445 — setroubleshoot: insecure use of commands.getstatusoutput in sealert
🎯 Affected products27
- Red Hat Enterprise Linux Client (v. 7)
- Red Hat Enterprise Linux Server (v. 7)
- Red Hat Enterprise Linux Workstation (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
- setroubleshoot-debuginfo-0:3.2.24-1.1.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-debuginfo-0:3.2.24-1.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-debuginfo-0:3.2.24-1.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-debuginfo-0:3.2.24-1.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-debuginfo-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
- setroubleshoot-debuginfo-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-debuginfo-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
- setroubleshoot-server-0:3.2.24-1.1.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-server-0:3.2.24-1.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-server-0:3.2.24-1.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-server-0:3.2.24-1.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-server-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
- setroubleshoot-server-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
- setroubleshoot-server-0:3.2.24-1.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258