Description
Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubuntu | Apport | unspecified – < 2.0.1-0ubuntu17.13, unspecified – < 2.19.1-0ubuntu4, unspecified – < 2.17.2-0ubuntu1.7, unspecified – < 2.14.1-0ubuntu3.18, unspecified – < 2.19.2 | 2.0.1-0ubuntu17.13 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | apport | 2.19.2-0ubuntu1 | — |
| Ubuntu 14.04 LTS | apport | 2.14.1-0ubuntu3.18 | USN-2782-1 |
Advisories 1
- USN-2782-1 apport vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026