========================================================================== Ubuntu Security Notice USN-4051-1 July 09, 2019
apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Apport could be made to expose sensitive information in crash reports. Software Description: - apport: automatically generate crash reports for debugging Details: Kevin Backhouse discovered a race-condition when reading the user's local Apport configuration. This could be used by a local attacker to cause Apport to include arbitrary files in a resulting crash report. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: python-apport 2.20.10-0ubuntu27.1 python3-apport 2.20.10-0ubuntu27.1 Ubuntu 18.10: python-apport 2.20.10-0ubuntu13.4 python3-apport 2.20.10-0ubuntu13.4 Ubuntu 18.04 LTS: python-apport 2.20.9-0ubuntu7.7 python3-apport 2.20.9-0ubuntu7.7 Ubuntu 16.04 LTS: python-apport 2.20.1-0ubuntu2.19 python3-apport 2.20.1-0ubuntu2.19 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/4051-1 CVE-2019-7307 Package Information: https://launchpad.net/ubuntu/+source/apport/2.20.10-0ubuntu27.1 https://launchpad.net/ubuntu/+source/apport/2.20.10-0ubuntu13.4 https://launchpad.net/ubuntu/+source/apport/2.20.9-0ubuntu7.7 https://launchpad.net/ubuntu/+source/apport/2.20.1-0ubuntu2.19
signature.asc
Description: PGP signature
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
