Summary
USN-7545-1 fixed vulnerabilities in Apport. The update incorrectly
handled logging if a crashing process was killed while Apport was
analyzing it. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Qualys discovered that Apport incorrectly handled metadata when
processing application crashes. An attacker could possibly use this issue
to leak sensitive information.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | apport | 2.20.11-0ubuntu27.31 |
| Ubuntu · 22.04 LTS 22.04:LTS | apport | 2.20.11-0ubuntu82.10 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | apport | 2.20.1-0ubuntu2.30+esm8 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | apport | 2.20.9-0ubuntu7.29+esm4 |
References
-
report
https://launchpad.net/bugs/2117236