apport 2.20.11-0ubuntu8.8 source package in Ubuntu
Changelog
apport (2.20.11-0ubuntu8.8) eoan-security; urgency=medium * SECURITY UPDATE: World writable root owned lock file created in user controllable location (LP: #1862348) - data/apport: Change location of lock file to be directly under /var/run so that regular users can not directly access it or perform symlink attacks. - CVE-2020-8831 * SECURITY UPDATE: Race condition between report creation and ownership (LP: #1862933) - data/apport: When setting owner of report file use a file-descriptor to the report file instead of its path name to ensure that users can not cause Apport to change the ownership of other files via a symlink attack. - CVE-2020-8833 -- Alex Murray <email address hidden> Wed, 25 Mar 2020 11:40:00 +1030
Upload details
- Uploaded by:
- Alex Murray
- Uploaded to:
- Eoan
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- utils
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
apport_2.20.11-0ubuntu8.8.tar.gz | 1.3 MiB | 4286fe0c8e3edb21b6963bdd2919aa20f4fc420fd39ebbc33de30c8099220a92 |
apport_2.20.11-0ubuntu8.8.dsc | 2.5 KiB | 5b5788d8c7e482f81d0ce2216d8553b80c8243b7f331b537c9fcc3ee1359d421 |
Available diffs
Binary packages built by this source
- apport: No summary available for apport in ubuntu eoan.
No description available for apport in ubuntu eoan.
- apport-gtk: No summary available for apport-gtk in ubuntu eoan.
No description available for apport-gtk in ubuntu eoan.
- apport-kde: No summary available for apport-kde in ubuntu eoan.
No description available for apport-kde in ubuntu eoan.
- apport-noui: No summary available for apport-noui in ubuntu eoan.
No description available for apport-noui in ubuntu eoan.
- apport-retrace: No summary available for apport-retrace in ubuntu eoan.
No description available for apport-retrace in ubuntu eoan.
- apport-valgrind: No summary available for apport-valgrind in ubuntu eoan.
No description available for apport-valgrind in ubuntu eoan.
- dh-apport: No summary available for dh-apport in ubuntu eoan.
No description available for dh-apport in ubuntu eoan.
- python-apport: No summary available for python-apport in ubuntu eoan.
No description available for python-apport in ubuntu eoan.
- python-problem-report: No summary available for python-problem-report in ubuntu eoan.
No description available for python-
problem- report in ubuntu eoan.
- python3-apport: No summary available for python3-apport in ubuntu eoan.
No description available for python3-apport in ubuntu eoan.
- python3-problem-report: No summary available for python3-problem-report in ubuntu eoan.
No description available for python3-
problem- report in ubuntu eoan.