Summary
It was discovered that Apport could be tricked into writing core files as
root into arbitrary directories in certain scenarios. A local attacker
could possibly use this issue to escalate privileges. This update will
cause Apport to generate all core files in the /var/lib/apport/coredump
directory.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | apport | 2.20.9-0ubuntu7.27 |
| Ubuntu · 20.04 LTS 20.04:LTS | apport | 2.20.11-0ubuntu27.21 |
References
-
report
https://launchpad.net/bugs/1948657