[SECURITY] Fedora 20 Update: setroubleshoot-3.2.17-2.fc20

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-4833
2015-03-28 23:41:04
--------------------------------------------------------------------------------

Name        : setroubleshoot
Product     : Fedora 20
Version     : 3.2.17
Release     : 2.fc20
URL         : https://fedorahosted.org/setroubleshoot
Summary     : Helps troubleshoot SELinux problems
Description :
setroubleshoot GUI. Application that allows you to view setroubleshoot-server
messages.
Provides tools to help diagnose SELinux problems. When AVC messages
are generated an alert can be generated that will give information
about the problem and help track its resolution. Alerts can be configured
to user preference. The same tools can be run on existing log files.

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2015-1815
--------------------------------------------------------------------------------
ChangeLog:

* Thu Mar 26 2015 Petr Lautrbach <plautrba at redhat.com> 3.2.17-2
- Fix get_rpm_nvr_*_temporary functions - CVE-2015-1815 (#1203352)
* Mon Jan 20 2014 Dan Walsh <dwalsh at redhat.com> - 3.2.17-1
- Fix unicode settings
* Tue Jan  7 2014 Dan Walsh <dwalsh at redhat.com> - 3.2.16-2
- Remove requires for notify-python and yum
* Thu Jan  2 2014 Dan Walsh <dwalsh at redhat.com> - 3.2.16-1
- Don't error out on no policy installed
- Update translations.
* Thu Jan  2 2014 Dan Walsh <dwalsh at redhat.com> - 3.2.15-2
- Eliminate requirement on service script.
* Tue Dec  3 2013 Dan Walsh <dwalsh at redhat.com> - 3.2.15-1
- Update Lanquages
- Use setup.py in Makefile for setroubleshoot dir
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1203352 - CVE-2015-1815 setroubleshoot: command injection via crafted file name
        https://bugzilla.redhat.com/show_bug.cgi?id=1203352
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update setroubleshoot' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------