apport 2.20.4-0ubuntu4.7 source package in Ubuntu

Changelog

apport (2.20.4-0ubuntu4.7) zesty-security; urgency=medium

  * SECURITY UPDATE: Denial of service via resource exhaustion and
    privilege escalation when handling crashes of tainted processes
    (LP: #1726372)
    - When /proc/sys/fs/suid_dumpable is set to 2, do not assume that
      the user and group owning the /proc/<PID>/stat file is the same
      user and group that started the process. Rather check the dump
      mode of the crashed process and do not write a core file if its
      value is 2. Thanks to Sander Bos for discovering this issue!
    - CVE-2017-14177
  * SECURITY UPDATE: Denial of service via resource exhaustion,
    privilege escalation, and possible container escape when handling
    crashes of processes inside PID namespaces (LP: #1726372)
    - Change the method for determining if a crash is from a container
      so that there are no false positives from software using PID
      namespaces. Additionally, disable container crash forwarding by
      ignoring crashes that occur in a PID namespace. This functionality
      may be re-enabled in a future update. Thanks to Sander Bos for
      discovering this issue!
    - CVE-2017-14180

 -- Brian Murray <email address hidden>  Thu, 09 Nov 2017 15:36:32 -0800

Upload details

Uploaded by:
Brian Murray on 2017-11-14
Sponsored by:
Tyler Hicks
Uploaded to:
Zesty
Original maintainer:
Martin Pitt
Architectures:
all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Zesty: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
apport_2.20.4.orig.tar.gz 1.1 MiB 4836252a61184fbc6ee526032bb5334db216efcf4ac3069ff1a9ab4fa130b985
apport_2.20.4-0ubuntu4.7.diff.gz 156.3 KiB 3e21306a7254c4c73db2e7e5a4c4fdd0eee85ae2dc5f48d9ad050a1cdedd27d9
apport_2.20.4-0ubuntu4.7.dsc 3.0 KiB 2b316b83fa3b8a84a9c176006f159b7c1d31382bea827b8178c1d1af17100f1e

View changes file

Binary packages built by this source

apport: No summary available for apport in ubuntu zesty.

No description available for apport in ubuntu zesty.

apport-gtk: No summary available for apport-gtk in ubuntu zesty.

No description available for apport-gtk in ubuntu zesty.

apport-kde: No summary available for apport-kde in ubuntu zesty.

No description available for apport-kde in ubuntu zesty.

apport-noui: No summary available for apport-noui in ubuntu zesty.

No description available for apport-noui in ubuntu zesty.

apport-retrace: No summary available for apport-retrace in ubuntu zesty.

No description available for apport-retrace in ubuntu zesty.

apport-valgrind: No summary available for apport-valgrind in ubuntu zesty.

No description available for apport-valgrind in ubuntu zesty.

dh-apport: No summary available for dh-apport in ubuntu zesty.

No description available for dh-apport in ubuntu zesty.

python-apport: No summary available for python-apport in ubuntu zesty.

No description available for python-apport in ubuntu zesty.

python-problem-report: No summary available for python-problem-report in ubuntu zesty.

No description available for python-problem-report in ubuntu zesty.

python3-apport: No summary available for python3-apport in ubuntu zesty.

No description available for python3-apport in ubuntu zesty.

python3-problem-report: No summary available for python3-problem-report in ubuntu zesty.

No description available for python3-problem-report in ubuntu zesty.