Summary
USN-7545-1 fixed vulnerabilities in Apport. The update introduced a
regression that raised an error if a crashing process was killed while
Apport was analyzing it. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Qualys discovered that Apport incorrectly handled metadata when
processing application crashes. An attacker could possibly use this issue
to leak sensitive information.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | apport | 2.20.11-0ubuntu27.30 |
| Ubuntu · 22.04 LTS 22.04:LTS | apport | 2.20.11-0ubuntu82.9 |
| Ubuntu · 24.04 LTS 24.04:LTS | apport | 2.28.1-0ubuntu3.8 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | apport | 2.20.1-0ubuntu2.30+esm7 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | apport | 2.20.9-0ubuntu7.29+esm3 |
References
-
report
https://launchpad.net/bugs/2112466