Description
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Canonical | apport | 2.20.11-0ubuntu82 – < 2.20.11-0ubuntu82.7, 2.32.0 – < 2.32.0-0ubuntu5.1, 2.20.9 – < 2.20.9-0ubuntu7.29+esm1, 2.28.1 – < 2.28.1-0ubuntu3.6, 2.33.0 – < 2.33.0-0ubuntu1, 2.20.1 – < 2.20.1-0ubuntu2.30+esm5, 2.20.11-0ubuntu27 – < 2.20.11-0ubuntu27.28 | 2.20.11-0ubuntu82.7 |