Format: 1.8 Date: Tue, 09 Jul 2019 12:33:44 -0700 Source: apport Binary: apport apport-gtk apport-kde apport-noui apport-retrace apport-valgrind dh-apport python-apport python-problem-report python3-apport python3-problem-report Architecture: all amd64_translations Version: 2.20.11-0ubuntu5 Distribution: eoan-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Brian Murray Description: apport - automatically generate crash reports for debugging apport-gtk - GTK+ frontend for the apport crash report system apport-kde - KDE frontend for the apport crash report system apport-noui - tools for automatically reporting Apport crash reports apport-retrace - tools for reprocessing Apport crash reports apport-valgrind - valgrind wrapper that first downloads debug symbols dh-apport - debhelper extension for the apport crash report system python-apport - Python library for Apport crash report handling python-problem-report - Python library to handle problem reports python3-apport - Python 3 library for Apport crash report handling python3-problem-report - Python 3 library to handle problem reports Launchpad-Bugs-Fixed: 1830858 Changes: apport (2.20.11-0ubuntu5) eoan; urgency=medium . * SECURITY UPDATE: TOCTOU issue allows local user to read arbitrary files (LP: #1830858) - apport/report.py: Avoid TOCTOU issue on users ignore file by dropping privileges and then opening the file both test for access and open the file in a single operation, instead of using access() before reading the file which could be abused by a symlink to cause Apport to read and embed an arbitrary file in the resulting crash dump. - CVE-2019-7307 * data/general-hooks/ubuntu.py: system-image-cli is no longer included in Ubuntu and we do not need SystemImageInfo any more. Checksums-Sha1: 9a9c01a4bfdf515521019b3e48504dc238430229 9708 apport-gtk_2.20.11-0ubuntu5_all.deb bfbcdb48428822096b91911648b95f44c320dc1d 17872 apport-kde_2.20.11-0ubuntu5_all.deb e3721693f0e669b6856bda74ec80dfe463f92bad 1960 apport-noui_2.20.11-0ubuntu5_all.deb 2e0ecd99486473442125c402c21f5ffdf7ac40f5 13088 apport-retrace_2.20.11-0ubuntu5_all.deb 9e59ab17068af26c386d584f9d5d12d3c4eafa2d 5168 apport-valgrind_2.20.11-0ubuntu5_all.deb 5ac4aabf367c2bdb252f4cc3b0c488153e6eb214 125412 apport_2.20.11-0ubuntu5_all.deb 16c0f4f68a45053499b0b8ef13fe2f7c4558f611 19627 apport_2.20.11-0ubuntu5_amd64.buildinfo f65745103a87fe09cb0ff92e84488b4b022cbff5 1263086 apport_2.20.11-0ubuntu5_amd64_translations.tar.gz b99f82bc4dfdf29a4aa04d7bcefe6d9fb1218101 7128 dh-apport_2.20.11-0ubuntu5_all.deb fed922c40e08bfce9ec96375c55d3984be58e362 82656 python-apport_2.20.11-0ubuntu5_all.deb 69bfbadd2aa85e1e4e0a062407914a21a88ccea1 9960 python-problem-report_2.20.11-0ubuntu5_all.deb c4e3f774b17f30f463f1e661a4c24ff005d1489e 82744 python3-apport_2.20.11-0ubuntu5_all.deb 4aed57f9c555d56d92960bf740a293f119b3edf1 10052 python3-problem-report_2.20.11-0ubuntu5_all.deb Checksums-Sha256: cc19b93a3d786058c8ca2bbed453f19aae517a2ca249e175bce25a489fa2f827 9708 apport-gtk_2.20.11-0ubuntu5_all.deb d0b879184a9917a8de32a7c71aa1617ccdb5e5518ed4a1a34d0388e6b9b18f5a 17872 apport-kde_2.20.11-0ubuntu5_all.deb 16826565312ed3e7d2aa3241a2fad42c2a5f3b24e29eb9b3137f86fa694475f5 1960 apport-noui_2.20.11-0ubuntu5_all.deb 14d5194ef4f9ef2f6115bb4d2d672c0e3e0a313b2f89f47af2e05203798c4f1e 13088 apport-retrace_2.20.11-0ubuntu5_all.deb 13c653aaab398c49b2654c17690840cab9955438065d9bccc9967454a35df713 5168 apport-valgrind_2.20.11-0ubuntu5_all.deb dda9d1330f2337c44a2132f55719a0eb631c92237ad5dcf04e24f55858f038e6 125412 apport_2.20.11-0ubuntu5_all.deb 7421191b07a705f237ed728fa9e8cd33a10e98961df127792b5b8e48f6d3e8ed 19627 apport_2.20.11-0ubuntu5_amd64.buildinfo 29f1120967b1db86d1d582c07d244da07d43f40eb74e3291a8bbf5edc5412ee0 1263086 apport_2.20.11-0ubuntu5_amd64_translations.tar.gz b4bb89e8fdebb51e7b7ceb0e9ba11cade88beb0a4fa4d0809339b8c0497b080d 7128 dh-apport_2.20.11-0ubuntu5_all.deb 0c2a5edcf923b832f878a048f23c2b451637df7c5b9d13283220f86ba3b398c9 82656 python-apport_2.20.11-0ubuntu5_all.deb cb71597916c6a3247c4325bf564dcabdef92f70f6c54825e3a65a9707fd6f78f 9960 python-problem-report_2.20.11-0ubuntu5_all.deb c6237ce38d74c6ec3c2429a847eee6d6875f22cefcd36c687b4288ad42d6bf5d 82744 python3-apport_2.20.11-0ubuntu5_all.deb 2c370ae499dd903be4b02a8d4f34cfdff5bccd6660691889a1e138df076aa73a 10052 python3-problem-report_2.20.11-0ubuntu5_all.deb Files: 986a9376b039cc5048061976404e8145 9708 gnome optional apport-gtk_2.20.11-0ubuntu5_all.deb 6f4cbef892d5c2328eb6102da6841fb2 17872 kde optional apport-kde_2.20.11-0ubuntu5_all.deb 2d8a80fcbb5a21d178176533a95bea15 1960 utils optional apport-noui_2.20.11-0ubuntu5_all.deb ddae6898daba7c2e4eb67efbbb3ce0fd 13088 devel optional apport-retrace_2.20.11-0ubuntu5_all.deb fa9201827a1a86cc42450f210c7dcc8a 5168 devel optional apport-valgrind_2.20.11-0ubuntu5_all.deb 7b0e4b93e06b93510c4140a9fb5d4ade 125412 utils optional apport_2.20.11-0ubuntu5_all.deb 3d638a4d03f1a14e85ddd4830a876d20 19627 utils optional apport_2.20.11-0ubuntu5_amd64.buildinfo 37d3ae2fdbefb1b4e695d31266227885 1263086 raw-translations - apport_2.20.11-0ubuntu5_amd64_translations.tar.gz 38222cdf64eb090b9a3c49e2da1661d1 7128 devel optional dh-apport_2.20.11-0ubuntu5_all.deb 7f246215745daa374d28f6886a25e85f 82656 python optional python-apport_2.20.11-0ubuntu5_all.deb 0ba180457c0a1657e48f71fb8f23864e 9960 python optional python-problem-report_2.20.11-0ubuntu5_all.deb cdcbb1d818d10a2795f1734e8fa4ece5 82744 python optional python3-apport_2.20.11-0ubuntu5_all.deb cd89c75372f612e9ed9f75d3638673bb 10052 python optional python3-problem-report_2.20.11-0ubuntu5_all.deb