Ubuntu
apport package

apport 2.20.10-0ubuntu27.1 source package in Ubuntu

Changelog

apport (2.20.10-0ubuntu27.1) disco-security; urgency=medium

  * SECURITY UPDATE: TOCTOU issue allows local user to read arbitrary
    files (LP: #1830858)
    - apport/report.py: Avoid TOCTOU issue on users ignore file by
      dropping privileges and then opening the file both test for access and
      open the file in a single operation, instead of using access() before
      reading the file which could be abused by a symlink to cause Apport to
      read and embed an arbitrary file in the resulting crash dump.
    - CVE-2019-7307

 -- Alex Murray <email address hidden>  Thu, 04 Jul 2019 12:05:21 +0930

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Disco: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
apport_2.20.10-0ubuntu27.1.tar.gz 1.3 MiB 011bdba5620b0a0f70d592cad806e052d3c51c407ae5788d8b9d44a12c8f0223
apport_2.20.10-0ubuntu27.1.dsc 2.5 KiB 55906f663b666e08913ac032ee78ba2bfa80e312c2f3f3608cd996491c50f513

View changes file

Binary packages built by this source

apport: No summary available for apport in ubuntu disco.

No description available for apport in ubuntu disco.

apport-gtk: No summary available for apport-gtk in ubuntu disco.

No description available for apport-gtk in ubuntu disco.

apport-kde: No summary available for apport-kde in ubuntu disco.

No description available for apport-kde in ubuntu disco.

apport-noui: No summary available for apport-noui in ubuntu disco.

No description available for apport-noui in ubuntu disco.

apport-retrace: No summary available for apport-retrace in ubuntu disco.

No description available for apport-retrace in ubuntu disco.

apport-valgrind: No summary available for apport-valgrind in ubuntu disco.

No description available for apport-valgrind in ubuntu disco.

dh-apport: No summary available for dh-apport in ubuntu disco.

No description available for dh-apport in ubuntu disco.

python-apport: No summary available for python-apport in ubuntu disco.

No description available for python-apport in ubuntu disco.

python-problem-report: No summary available for python-problem-report in ubuntu disco.

No description available for python-problem-report in ubuntu disco.

python3-apport: No summary available for python3-apport in ubuntu disco.

No description available for python3-apport in ubuntu disco.

python3-problem-report: No summary available for python3-problem-report in ubuntu disco.

No description available for python3-problem-report in ubuntu disco.