Issued:
2016-02-09
Updated:
2016-02-09

RHSA-2016:0152 - Security Advisory

Synopsis

Moderate: sos security and bug fix update

Type/Severity

Security Advisory: Moderate

Topic

An updated sos package that fixes one security issue and one bug is now
available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

The sos package contains a set of tools that gather information from system
hardware, logs and configuration files. The information can then be used
for diagnostic purposes and debugging.

An insecure temporary file use flaw was found in the way sos created
certain sosreport files. A local attacker could possibly use this flaw
to perform a symbolic link attack to reveal the contents of sosreport
files, or in some cases modify arbitrary files and escalate their
privileges on the system. (CVE-2015-7529)

This issue was discovered by Mateusz Guzik of Red Hat.

This update also fixes the following bug:

  • Previously, when the hpasm plug-in ran the "hpasmcli" command in a Python
    Popen constructor or a system pipeline, the command would hang and
    eventually time out after 300 seconds. Sos was forced to wait for the time
    out to finish, unnecessarily prolonging its run time. With this update, the
    timeout of the "hpasmcli" command has been set to 0, eliminating the delay
    and speeding up sos completion time. (BZ#1291828)

All sos users are advised to upgrade to this updated package, which
contains backported patches to correct these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 6.7 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 6.7 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.7 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7 i386
  • Red Hat Enterprise Linux EUS Compute Node 6.7 x86_64

Fixes

  • BZ - 1282542 - CVE-2015-7529 sos: Usage of predictable temporary files allows privilege escalation

CVEs

References

Red Hat Enterprise Linux Server 6

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
x86_64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb
i386
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux Server - Extended Update Support 6.7

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
x86_64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb
i386
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux Workstation 6

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
x86_64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb
i386
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux Desktop 6

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
x86_64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb
i386
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
s390x
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.7

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
s390x
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux for Power, big endian 6

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
ppc64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
ppc64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
x86_64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux Server from RHUI 6

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
x86_64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb
i386
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
x86_64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb
i386
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

Red Hat Enterprise Linux EUS Compute Node 6.7

SRPM
sos-3.2-28.el6_7.2.src.rpm SHA-256: 76ca99bd399764ec7801de9c55f1b2b6f14b0fb59842647877bac71681b72916
x86_64
sos-3.2-28.el6_7.2.noarch.rpm SHA-256: 99a837e1ea36cb0ca55ef7f740d495a5a3c67eb9c2f9fc1f2abbdc5e31db9fdb

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.