Format: 1.8
Date: Wed, 25 Mar 2020 11:28:58 +1030
Source: apport
Binary: apport apport-gtk apport-kde apport-noui apport-retrace apport-valgrind dh-apport python3-apport python3-problem-report
Architecture: all amd64_translations
Version: 2.20.11-0ubuntu22
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-039.buildd>
Changed-By: Alex Murray <alex.murray@canonical.com>
Description:
 apport     - automatically generate crash reports for debugging
 apport-gtk - GTK+ frontend for the apport crash report system
 apport-kde - KDE frontend for the apport crash report system
 apport-noui - tools for automatically reporting Apport crash reports
 apport-retrace - tools for reprocessing Apport crash reports
 apport-valgrind - valgrind wrapper that first downloads debug symbols
 dh-apport  - debhelper extension for the apport crash report system
 python3-apport - Python 3 library for Apport crash report handling
 python3-problem-report - Python 3 library to handle problem reports
Launchpad-Bugs-Fixed: 1862348 1862933
Changes:
 apport (2.20.11-0ubuntu22) focal; urgency=medium
 .
   * SECURITY UPDATE: World writable root owned lock file created in user
     controllable location (LP: #1862348)
     - data/apport: Change location of lock file to be directly under
       /var/run so that regular users can not directly access it or perform
       symlink attacks.
     - CVE-2020-8831
   * SECURITY UPDATE: Race condition between report creation and ownership
     (LP: #1862933)
     - data/apport: When setting owner of report file use a file-descriptor
       to the report file instead of its path name to ensure that users can
       not cause Apport to change the ownership of other files via a
       symlink attack.
     - CVE-2020-8833
Checksums-Sha1:
 1686e8e432e8b0b8364a2e0deba623a6776319c2 9716 apport-gtk_2.20.11-0ubuntu22_all.deb
 fc1c64e7e58bd7f9c81a035074eeca1fc9e58d06 17876 apport-kde_2.20.11-0ubuntu22_all.deb
 13110e84d86da50d301c92c1af7f96aa99ea73c4 1964 apport-noui_2.20.11-0ubuntu22_all.deb
 0292f45a74afe76dba1e089ebb9f15b67e94283c 13096 apport-retrace_2.20.11-0ubuntu22_all.deb
 22b3f61fa340044c87b43ff83b0ef871f658fb30 5180 apport-valgrind_2.20.11-0ubuntu22_all.deb
 2385a44dc4ef7163360aebd0a8f51f15b9a8ad5d 125396 apport_2.20.11-0ubuntu22_all.deb
 89f6b39d017aeff5a63552e496376cd2a2a683d1 18319 apport_2.20.11-0ubuntu22_amd64.buildinfo
 de1c409fcb1484a805564782beca9d939778e705 1250422 apport_2.20.11-0ubuntu22_amd64_translations.tar.gz
 f9577bfe4f0eaf616fd7c8e07200e5190b0c29e4 7300 dh-apport_2.20.11-0ubuntu22_all.deb
 2272e9c5635e98f35bec918a4bc7a0ec668e8b21 83268 python3-apport_2.20.11-0ubuntu22_all.deb
 00ffc88cffa0b642563bfd58ace255132d9c7bed 10232 python3-problem-report_2.20.11-0ubuntu22_all.deb
Checksums-Sha256:
 3720c5f5b6a1d507dadc137eff1a571f22147c1be828d60fcd78d5bbec1c334e 9716 apport-gtk_2.20.11-0ubuntu22_all.deb
 1164f367acf95e187b112ee68a2f40befd75dac4575d57fb9b6c0e867c4f6ace 17876 apport-kde_2.20.11-0ubuntu22_all.deb
 27462a4fe9ef229853ac0332840db0b84f6308fef30e187959231303d291d797 1964 apport-noui_2.20.11-0ubuntu22_all.deb
 c0d82947baf471beee7c071e1f0644851e971302a8cf4e6662fec66dda652b6a 13096 apport-retrace_2.20.11-0ubuntu22_all.deb
 877393f13103e062eedf5deb0962820b5e185158b9b0726e5d90096cb766cdb5 5180 apport-valgrind_2.20.11-0ubuntu22_all.deb
 b5a36fbc33a3d0369ab20a1aa3f2950fd19ff36329068edc2088de6e0731615b 125396 apport_2.20.11-0ubuntu22_all.deb
 292675082fa8b726532c780434148b101e48d1aee3e7dcda9f9d69ba1001d72c 18319 apport_2.20.11-0ubuntu22_amd64.buildinfo
 34a2144d28e2b6e7ff9b5ed7088a4bf0d236173569e8a38caefb127bca1c5e71 1250422 apport_2.20.11-0ubuntu22_amd64_translations.tar.gz
 41f613bc05bebfd922f2ce97fcb70c2d764b669537e6306043035a8f06abf9c4 7300 dh-apport_2.20.11-0ubuntu22_all.deb
 c36d8d2dee0fecfb97cee56c779db2a4b282b4b54890e899011f583cab11dfcb 83268 python3-apport_2.20.11-0ubuntu22_all.deb
 661c2ffb4e46fe99a84537d4c5aebf1f21c54b8b6038dc3015fbd925f54254b3 10232 python3-problem-report_2.20.11-0ubuntu22_all.deb
Files:
 36da49518556d5f667133e20ee8b01ee 9716 gnome optional apport-gtk_2.20.11-0ubuntu22_all.deb
 d4d0b7dd848406b0b59533dab3b1059a 17876 kde optional apport-kde_2.20.11-0ubuntu22_all.deb
 030627b6b47ce1684659c13222ae443d 1964 utils optional apport-noui_2.20.11-0ubuntu22_all.deb
 f79097c442bb97a5fffb87960a4bf3b2 13096 devel optional apport-retrace_2.20.11-0ubuntu22_all.deb
 e723f932489b0bad49747e0b851fceef 5180 devel optional apport-valgrind_2.20.11-0ubuntu22_all.deb
 50cda33726289075624a6503745ef2a4 125396 utils optional apport_2.20.11-0ubuntu22_all.deb
 1810e61f5ad8bb0e2c5e9c907949a183 18319 utils optional apport_2.20.11-0ubuntu22_amd64.buildinfo
 2e63dd7719ef2ca587aa1a788b11fa5f 1250422 raw-translations - apport_2.20.11-0ubuntu22_amd64_translations.tar.gz
 b450d4d4170b491901a74987e002bf8b 7300 devel optional dh-apport_2.20.11-0ubuntu22_all.deb
 d1074e4741245166eb03e00e398f2999 83268 python optional python3-apport_2.20.11-0ubuntu22_all.deb
 74e311e64c0a114122c9d9cdcca8c9e5 10232 python optional python3-problem-report_2.20.11-0ubuntu22_all.deb