REDHAT-BUG-1059410
First published: Wed Jan 29 2014(Updated: )
These aren't security flaws, precisely, due to some of the other defaults that Fedora has that other distros/vendors may not, but upstream recently did some hardening to the defaults they provide (and we don't change) based on Martin Carpenter's report. <a href="https://git.enlightenment.org/core/enlightenment.git/commit/?id=9456e88504cb5daddbac3f49373a3a9a8577e27a">https://git.enlightenment.org/core/enlightenment.git/commit/?id=9456e88504cb5daddbac3f49373a3a9a8577e27a</a> commit 9456e88504cb5daddbac3f49373a3a9a8577e27a Author: Carsten Haitzler (Rasterman) <raster> Date: Fri Dec 6 09:19:08 2013 +0900 e_sys - fix busy spin problem with security clamp-down <a href="https://git.enlightenment.org/core/enlightenment.git/commit/?id=666df815cd86a50343859bce36c5cf968c5f38b0">https://git.enlightenment.org/core/enlightenment.git/commit/?id=666df815cd86a50343859bce36c5cf968c5f38b0</a> commit 666df815cd86a50343859bce36c5cf968c5f38b0 Author: Carsten Haitzler (Rasterman) <raster> Date: Sun Dec 1 11:48:49 2013 +0900 e_sys - address security concerns with environment - more add more environment variables to nuke and add alternate envrionment nuke method to raise security level. <a href="https://git.enlightenment.org/core/enlightenment.git/commit/?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b">https://git.enlightenment.org/core/enlightenment.git/commit/?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b</a> commit bb4a21e98656fe2c7d98ba2163e6defe9a630e2b Author: Carsten Haitzler (Rasterman) <raster> Date: Sat Nov 30 22:26:30 2013 +0900 e_sys - address security concerns with environment and gdb 1. clear out environment as best is possible before executing anything. especially PATH and IFS are set to minimal base defaults. also use clearenv() if available and unsetenv() 2. remove gdb method as it's just too dangerous. run it as normal as the user and if the kernel / distro dny that - then sorry. too bad.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Enlightenment Terminology |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.enlightenment.org/core/enlightenment.git/commit/?id=9456e88504cb5daddbac3f49373a3a9a8577e27a
- https://git.enlightenment.org/core/enlightenment.git/commit/?id=666df815cd86a50343859bce36c5cf968c5f38b0
- https://git.enlightenment.org/core/enlightenment.git/commit/?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b
- https://access.redhat.com/security/cve/CVE-2014-1845
- https://access.redhat.com/security/cve/CVE-2014-1846
- http://openwall.com/lists/oss-security/2014/02/03/19
- https://bugzilla.redhat.com/show_bug.cgi?id=1059410
Frequently Asked Questions
What is the severity of REDHAT-BUG-1059410?
The severity of REDHAT-BUG-1059410 is low as it does not constitute a security flaw.
How do I fix REDHAT-BUG-1059410?
To address REDHAT-BUG-1059410, ensure that you are using the recommended default configurations provided by upstream Enlightenment.
What software is affected by REDHAT-BUG-1059410?
REDHAT-BUG-1059410 affects the Enlightenment desktop environment.
What has been changed in REDHAT-BUG-1059410?
REDHAT-BUG-1059410 involves hardening default configurations based on upstream recommendations.
Who reported the changes in REDHAT-BUG-1059410?
The changes leading to REDHAT-BUG-1059410 were reported by Martin Carpenter.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-1845
- agent/severity
- agent/references
- agent/event
- agent/description
- agent/trending
- agent/source
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/enlightenment
- canonical/enlightenment terminology