Format: 1.8
Date: Thu, 04 Jul 2019 12:05:21 +0930
Source: apport
Binary: apport python-problem-report python3-problem-report python-apport python3-apport apport-retrace apport-valgrind apport-gtk apport-kde dh-apport apport-noui
Architecture: all amd64_translations
Version: 2.20.9-0ubuntu7.7
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-024.buildd>
Changed-By: Alex Murray <alex.murray@canonical.com>
Description:
 apport     - automatically generate crash reports for debugging
 apport-gtk - GTK+ frontend for the apport crash report system
 apport-kde - KDE frontend for the apport crash report system
 apport-noui - tools for automatically reporting Apport crash reports
 apport-retrace - tools for reprocessing Apport crash reports
 apport-valgrind - valgrind wrapper that first downloads debug symbols
 dh-apport  - debhelper extension for the apport crash report system
 python-apport - Python library for Apport crash report handling
 python-problem-report - Python library to handle problem reports
 python3-apport - Python 3 library for Apport crash report handling
 python3-problem-report - Python 3 library to handle problem reports
Launchpad-Bugs-Fixed: 1830858
Changes:
 apport (2.20.9-0ubuntu7.7) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: TOCTOU issue allows local user to read arbitrary
     files (LP: #1830858)
     - apport/report.py: Avoid TOCTOU issue on users ignore file by
       dropping privileges and then opening the file both test for access and
       open the file in a single operation, instead of using access() before
       reading the file which could be abused by a symlink to cause Apport to
       read and embed an arbitrary file in the resulting crash dump.
     - CVE-2019-7307
Checksums-Sha1:
 1a6e25cfe4d443a0e61b982f00dc33dbe27d50bc 9704 apport-gtk_2.20.9-0ubuntu7.7_all.deb
 eb768ed04b8878129dcb45facce57d11c51226fe 17848 apport-kde_2.20.9-0ubuntu7.7_all.deb
 51931332d920d90ca7d3e02962836afe1ef9decf 1952 apport-noui_2.20.9-0ubuntu7.7_all.deb
 22e3af39da0302078a79880119cc6036e730f03e 13080 apport-retrace_2.20.9-0ubuntu7.7_all.deb
 a19ffaf0e22830a0673471a7ecd12dfe9e35ff54 5172 apport-valgrind_2.20.9-0ubuntu7.7_all.deb
 ebeaba2936af9f6b498f73a7446f5f6c1834a9c5 123876 apport_2.20.9-0ubuntu7.7_all.deb
 a6d9888f06c16aa5dea189915a5791a63cb0bc06 19865 apport_2.20.9-0ubuntu7.7_amd64.buildinfo
 c173d56ca472256d687bfcee7454b1510800c9ef 1219686 apport_2.20.9-0ubuntu7.7_amd64_translations.tar.gz
 0cacc8ab69903a1373e1426c71a14b16a4f7dbdd 7080 dh-apport_2.20.9-0ubuntu7.7_all.deb
 d9fe2af11e8df9ed0337ed5ede09ef53a0a07d24 81656 python-apport_2.20.9-0ubuntu7.7_all.deb
 5ee7aad091bc4f90bfcb58f410ae00af055cdb57 9980 python-problem-report_2.20.9-0ubuntu7.7_all.deb
 5fbc310e54ab80b956367ba3deccff0a69c5bdf1 81748 python3-apport_2.20.9-0ubuntu7.7_all.deb
 24f4a736aa621fa778a86f5695ef3e43926fbb04 10060 python3-problem-report_2.20.9-0ubuntu7.7_all.deb
Checksums-Sha256:
 75f9e45128e478f5babef571d9d43dc23e9402097ed49420ab2dedafb50966ae 9704 apport-gtk_2.20.9-0ubuntu7.7_all.deb
 47467b5a387212e86ac8599ced70c68c3c0fa0768fb7499be7dc75eb1af0b309 17848 apport-kde_2.20.9-0ubuntu7.7_all.deb
 977193704deaee0bbd3c912e8b8d23e243f6b3598afea3ea3b422f1afb77bc3e 1952 apport-noui_2.20.9-0ubuntu7.7_all.deb
 38ee3f177a310b8c78a0d1204fccc0895cd7db2b7ae976fcfc48ca0b374690db 13080 apport-retrace_2.20.9-0ubuntu7.7_all.deb
 9adeec331cecb387e0fde514b421471a70f6e7018d08921a9fc19a7c758a9ba9 5172 apport-valgrind_2.20.9-0ubuntu7.7_all.deb
 33a29de235bf51fe1abd101eff3d55ab38bcd3c8724eb28f441ff79589b44e50 123876 apport_2.20.9-0ubuntu7.7_all.deb
 72008e943aecba623526ace80b2c277b58bfccdd98bcd37d50d578e16372f508 19865 apport_2.20.9-0ubuntu7.7_amd64.buildinfo
 d985a2cb46b932b079f7700c96f24e955eab0f2d6fdab228875fcc92987fb31f 1219686 apport_2.20.9-0ubuntu7.7_amd64_translations.tar.gz
 393b82734d58b277709b2020ea7238431f8dfe1005585596d57c27599bcc3ecc 7080 dh-apport_2.20.9-0ubuntu7.7_all.deb
 6ccdb6bb3887f8434ca6512976010e6649815286d3d32578b4ceabb4b7a27f6c 81656 python-apport_2.20.9-0ubuntu7.7_all.deb
 0c7a27ca36cf89c8d797eae1fc2209517c77950d8e7eec766d0d607c0067d08b 9980 python-problem-report_2.20.9-0ubuntu7.7_all.deb
 2b600db922c1f26afa2d2f94fe954e4fb551cb22e897382408befb89deba39b5 81748 python3-apport_2.20.9-0ubuntu7.7_all.deb
 1d2161c4d5ccf9a2be003a6a9ad21ee2edad3e7e3037d2f3a6d6dbdb28c1b22a 10060 python3-problem-report_2.20.9-0ubuntu7.7_all.deb
Files:
 350b049adf336790b7a9c6c9f0ff8ed5 9704 gnome optional apport-gtk_2.20.9-0ubuntu7.7_all.deb
 84f55045f4c2d667b343a53604e63dfc 17848 kde optional apport-kde_2.20.9-0ubuntu7.7_all.deb
 4995da7764aa132fddec45931bbbd7f4 1952 utils optional apport-noui_2.20.9-0ubuntu7.7_all.deb
 8ef3479d7cc91704af6effcc97d7286f 13080 devel optional apport-retrace_2.20.9-0ubuntu7.7_all.deb
 8982118db145cbe007dca033ad037a90 5172 devel optional apport-valgrind_2.20.9-0ubuntu7.7_all.deb
 7cd1b579398f48d3f03d935b76d27f02 123876 utils optional apport_2.20.9-0ubuntu7.7_all.deb
 8b5e8fe0f30704f5d858ed2f16fb23f6 19865 utils optional apport_2.20.9-0ubuntu7.7_amd64.buildinfo
 ed7a68f52fd5ac5e9099091083156475 1219686 raw-translations - apport_2.20.9-0ubuntu7.7_amd64_translations.tar.gz
 b9211d4965872aa9dac9e29233f9c9a9 7080 devel optional dh-apport_2.20.9-0ubuntu7.7_all.deb
 9aabd1d505fb5372dae2373ca31fab41 81656 python optional python-apport_2.20.9-0ubuntu7.7_all.deb
 3822b8f83f2a9e7cfb900ec3ac1ef5c4 9980 python optional python-problem-report_2.20.9-0ubuntu7.7_all.deb
 2add3e6fa8936c4af1ed91565079d769 81748 python optional python3-apport_2.20.9-0ubuntu7.7_all.deb
 ef592dded44b90e8c767bd00ae6875ef 10060 python optional python3-problem-report_2.20.9-0ubuntu7.7_all.deb