HCE1-SA-2024-0001 Moderate HCE 1.1 Security Fix(es): The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp. (CVE-2015-5273) The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump. (CVE-2015-5287) HCE 1.1 abrt-2.1.11-60.hce1c.x86_64.rpm abrt-addon-ccpp-2.1.11-60.hce1c.x86_64.rpm abrt-addon-kerneloops-2.1.11-60.hce1c.x86_64.rpm abrt-addon-pstoreoops-2.1.11-60.hce1c.x86_64.rpm abrt-addon-python-2.1.11-60.hce1c.x86_64.rpm abrt-addon-vmcore-2.1.11-60.hce1c.x86_64.rpm abrt-addon-xorg-2.1.11-60.hce1c.x86_64.rpm abrt-cli-2.1.11-60.hce1c.x86_64.rpm abrt-console-notification-2.1.11-60.hce1c.x86_64.rpm abrt-dbus-2.1.11-60.hce1c.x86_64.rpm abrt-libs-2.1.11-60.hce1c.x86_64.rpm abrt-python-2.1.11-60.hce1c.x86_64.rpm abrt-retrace-client-2.1.11-60.hce1c.x86_64.rpm abrt-tui-2.1.11-60.hce1c.x86_64.rpm