Ubuntu
apport package

apport 2.20.10-0ubuntu13.4 source package in Ubuntu

Changelog

apport (2.20.10-0ubuntu13.4) cosmic-security; urgency=medium

  * SECURITY UPDATE: TOCTOU issue allows local user to read arbitrary
    files (LP: #1830858)
    - apport/report.py: Avoid TOCTOU issue on users ignore file by
      dropping privileges and then opening the file both test for access and
      open the file in a single operation, instead of using access() before
      reading the file which could be abused by a symlink to cause Apport to
      read and embed an arbitrary file in the resulting crash dump.
    - CVE-2019-7307

 -- Alex Murray <email address hidden>  Thu, 04 Jul 2019 12:05:21 +0930

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Cosmic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Cosmic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
apport_2.20.10-0ubuntu13.4.tar.gz 1.3 MiB e2b05d265af41ffeaeee781351796167614a0625502bcedd4bea59cdb7a0d135
apport_2.20.10-0ubuntu13.4.dsc 2.5 KiB cac37976f2af8c7a60db38610cfa700acc0c95426016df03dd5b5ca3d0833c89

View changes file

Binary packages built by this source

apport: No summary available for apport in ubuntu cosmic.

No description available for apport in ubuntu cosmic.

apport-gtk: No summary available for apport-gtk in ubuntu cosmic.

No description available for apport-gtk in ubuntu cosmic.

apport-kde: No summary available for apport-kde in ubuntu cosmic.

No description available for apport-kde in ubuntu cosmic.

apport-noui: No summary available for apport-noui in ubuntu cosmic.

No description available for apport-noui in ubuntu cosmic.

apport-retrace: No summary available for apport-retrace in ubuntu cosmic.

No description available for apport-retrace in ubuntu cosmic.

apport-valgrind: No summary available for apport-valgrind in ubuntu cosmic.

No description available for apport-valgrind in ubuntu cosmic.

dh-apport: No summary available for dh-apport in ubuntu cosmic.

No description available for dh-apport in ubuntu cosmic.

python-apport: No summary available for python-apport in ubuntu cosmic.

No description available for python-apport in ubuntu cosmic.

python-problem-report: No summary available for python-problem-report in ubuntu cosmic.

No description available for python-problem-report in ubuntu cosmic.

python3-apport: No summary available for python3-apport in ubuntu cosmic.

No description available for python3-apport in ubuntu cosmic.

python3-problem-report: No summary available for python3-problem-report in ubuntu cosmic.

No description available for python3-problem-report in ubuntu cosmic.