Format: 1.8
Date: Thu, 04 Jul 2019 12:05:21 +0930
Source: apport
Binary: apport apport-gtk apport-kde apport-noui apport-retrace apport-valgrind dh-apport python-apport python-problem-report python3-apport python3-problem-report
Architecture: all amd64_translations
Version: 2.20.10-0ubuntu27.1
Distribution: disco
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-026.buildd>
Changed-By: Alex Murray <alex.murray@canonical.com>
Description:
 apport     - automatically generate crash reports for debugging
 apport-gtk - GTK+ frontend for the apport crash report system
 apport-kde - KDE frontend for the apport crash report system
 apport-noui - tools for automatically reporting Apport crash reports
 apport-retrace - tools for reprocessing Apport crash reports
 apport-valgrind - valgrind wrapper that first downloads debug symbols
 dh-apport  - debhelper extension for the apport crash report system
 python-apport - Python library for Apport crash report handling
 python-problem-report - Python library to handle problem reports
 python3-apport - Python 3 library for Apport crash report handling
 python3-problem-report - Python 3 library to handle problem reports
Launchpad-Bugs-Fixed: 1830858
Changes:
 apport (2.20.10-0ubuntu27.1) disco-security; urgency=medium
 .
   * SECURITY UPDATE: TOCTOU issue allows local user to read arbitrary
     files (LP: #1830858)
     - apport/report.py: Avoid TOCTOU issue on users ignore file by
       dropping privileges and then opening the file both test for access and
       open the file in a single operation, instead of using access() before
       reading the file which could be abused by a symlink to cause Apport to
       read and embed an arbitrary file in the resulting crash dump.
     - CVE-2019-7307
Checksums-Sha1:
 96360949a6b4851ecade9f2ae64527d6b8597d82 9716 apport-gtk_2.20.10-0ubuntu27.1_all.deb
 28c291b2fb0858b51ba32ddb6ea0800a56e84c73 17872 apport-kde_2.20.10-0ubuntu27.1_all.deb
 38da853890d8b6fadb97185f63a18ddfed8b6f42 1964 apport-noui_2.20.10-0ubuntu27.1_all.deb
 2b8dbd5424a88373bdf918a7bd9e6c6b690c6326 13092 apport-retrace_2.20.10-0ubuntu27.1_all.deb
 dade7c3bc9c25a95f3c6853716ed5344d34d3453 5180 apport-valgrind_2.20.10-0ubuntu27.1_all.deb
 34013ad1934c95305558a1a0d14de697e40c899e 124516 apport_2.20.10-0ubuntu27.1_all.deb
 70e92765e42d0e715738b14fb0b3386ed5bd9a60 19473 apport_2.20.10-0ubuntu27.1_amd64.buildinfo
 75a72bd5bf7a5b23308bfe97f9a861186a421b40 1225582 apport_2.20.10-0ubuntu27.1_amd64_translations.tar.gz
 980b575f319a8e32de1d17a11bc18acd1426b81f 6632 dh-apport_2.20.10-0ubuntu27.1_all.deb
 a269184ef5c6da92207eeee80b37d5b069b6bbe5 82040 python-apport_2.20.10-0ubuntu27.1_all.deb
 a5807b6703f91598287ebd93d1397f40050c63a8 9464 python-problem-report_2.20.10-0ubuntu27.1_all.deb
 d400f133b5bc6393983166102b20ce82cd21226b 82172 python3-apport_2.20.10-0ubuntu27.1_all.deb
 01737b6a70ff7e8155358a851640cb31ed6b9e7f 9560 python3-problem-report_2.20.10-0ubuntu27.1_all.deb
Checksums-Sha256:
 9f2c677c9650bfd8769e084b18a25e2267a8012e7e3237ef64f445808bbdbc79 9716 apport-gtk_2.20.10-0ubuntu27.1_all.deb
 d056aa8ad28cbc578fcf42e3c31ce06430e1fda528f1d2d25572ab1a42152501 17872 apport-kde_2.20.10-0ubuntu27.1_all.deb
 eafb5f4b2a4a7cf0eba9fef8b8ebe2c7fcac6ab2a8f5c515f2b5999a4ccd3afe 1964 apport-noui_2.20.10-0ubuntu27.1_all.deb
 bd23dd8b4011f145ea2ef8ad62724d986e178c9b643a6fc782dd70aa7657c267 13092 apport-retrace_2.20.10-0ubuntu27.1_all.deb
 3ef7e7e50630d4ce55e78f09774b963055e9c850447ee12d4def1d01428b563c 5180 apport-valgrind_2.20.10-0ubuntu27.1_all.deb
 2457fd4f7df481d230308a525a150f455dc5f68450cf6a1a3fac2c78366511dd 124516 apport_2.20.10-0ubuntu27.1_all.deb
 f130e45ff3d8b5abd4a9cd53935b0b45064bfcb4985ac745d85279d354e14652 19473 apport_2.20.10-0ubuntu27.1_amd64.buildinfo
 870852b9c4727dee3889fbada598b1a011106a975c2d9dd702c50a76176db545 1225582 apport_2.20.10-0ubuntu27.1_amd64_translations.tar.gz
 d767ea6ddc17a779db00c160493432bf147af049bce6bc37ffc4590fad802d1e 6632 dh-apport_2.20.10-0ubuntu27.1_all.deb
 ea3143647ea7bc4906c3c30995d04f5619e89a77458b14200c853121e52c9f92 82040 python-apport_2.20.10-0ubuntu27.1_all.deb
 3b34cbd6afb9c0064533a9f4553644cc6ce1341c3082601f8d0f00ef10c55588 9464 python-problem-report_2.20.10-0ubuntu27.1_all.deb
 d3b1cf6f33e2617b3743896110b1a2242cbf1ffdf8d0637a3386461a7f9dcb95 82172 python3-apport_2.20.10-0ubuntu27.1_all.deb
 50e6437ff06ea7898352bdb13a67c71d5375bc09a1a194e26a86130489a03437 9560 python3-problem-report_2.20.10-0ubuntu27.1_all.deb
Files:
 e19d1532efd055c0c3f37d45bdfa4328 9716 gnome optional apport-gtk_2.20.10-0ubuntu27.1_all.deb
 cb95ef5c3c13f608a677b353a4f20841 17872 kde optional apport-kde_2.20.10-0ubuntu27.1_all.deb
 d70aa156e97bc46c3c18dece98fc5ff1 1964 utils optional apport-noui_2.20.10-0ubuntu27.1_all.deb
 283d54a2d9857ac94931a3900afe5fb3 13092 devel optional apport-retrace_2.20.10-0ubuntu27.1_all.deb
 bfd3b62f91b1b60695a047945da1e3e6 5180 devel optional apport-valgrind_2.20.10-0ubuntu27.1_all.deb
 3a20c639f6d0168e2caf8a38f79534f0 124516 utils optional apport_2.20.10-0ubuntu27.1_all.deb
 c47f179f755950ef198af6b4dea4ebbc 19473 utils optional apport_2.20.10-0ubuntu27.1_amd64.buildinfo
 22f4866266d1bce9228074f78b24bfc3 1225582 raw-translations - apport_2.20.10-0ubuntu27.1_amd64_translations.tar.gz
 f94b2ad7721c42ed5ce7e5b1b9aa6496 6632 devel optional dh-apport_2.20.10-0ubuntu27.1_all.deb
 be47b1c384a3f59ae4cfd270f87eee3d 82040 python optional python-apport_2.20.10-0ubuntu27.1_all.deb
 0244fb8d036daf92a528ae81d2bab3bb 9464 python optional python-problem-report_2.20.10-0ubuntu27.1_all.deb
 3d154432cee3295ab9cb38b0891358e2 82172 python optional python3-apport_2.20.10-0ubuntu27.1_all.deb
 96156bcb736a9ba475c2074160097584 9560 python optional python3-problem-report_2.20.10-0ubuntu27.1_all.deb