RHBA-2015:1453 - Bug Fix Advisory

Topic

Updated abrt, libreport, and satyr packages that fix several bugs and add one
enhancement are now available for Red Hat Enterprise Linux 6.

Description

The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and
creates bug reports that help maintainers to fix the defects. ABRT uses a
plug-in system to extend its functionality.

The libreport libraries provide APIs for reporting different problems in
applications to different bug targets like Bugzilla, FTP, or Trac.

The satyr packages provide a library that is used for creating and processing
ABRT micro-reports.

This update fixes the following bugs:

• The abrt-addon-ccpp process logs messages using the rsyslog daemon. When

rsyslog terminated unexpectedly, abrt-addon-ccpp could enter a deadlock state,
because the /dev/log socket was not freed. The underlying source code has been
modified to fix this bug, and the deadlock no longer occurs in the described
situation. (BZ#1199261)

• The "bootloader" plug-in was renamed to "boot". However, ABRT still used the

old name when generating SOS reports. As a consequence, ABRT did not include SOS
report data in its crash reports. With this update, ABRT now uses the correct
name and generates SOS reports as expected. (BZ#1208154)

• The libreport library could previously change mode of any file or mode of the

dump directory because it followed symbolic links. Also, libreport could change
ownership of a new dump directory. This behavior could lead to security issues.
With this update, this bug has been fixed, and libreport no longer changes modes
or ownership. (BZ#1212095)

In addition, this update adds the following enhancement:

• This update introduces ABRT micro-reporting. When a crash occurs, users can

now send authenticated reports about the problem called micro-reports. These
reports contain non-sensitive data describing the problem and optionally host
name, machine ID, and RHN account number. Micro-reports help Red Hat to track
bug occurrences and to provide instant solutions to crashes. See
https://access.redhat.com/node/642323 for more information about
micro-reporting. (BZ#1150197, BZ#1152222, BZ#1153311)

Users of abrt, libreport, and satyr are advised to upgrade to these updated
packages, which fix these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

CVEs

(none)

References

• https://access.redhat.com/node/642323