lp:~alexmurray/apport/apport

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:~apport-hackers/apport/trunk at revision 3254

Apport upstream developers: Pending requested 2019-07-09

Diff: 32 lines (+13/-3)

1 file modified

apport/report.py (+13/-3)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1830858: TOCTOU vulnerability in _get_ignore_dom (report.py)

Critical

Fix Released

Link a bug report

Related blueprints

3254. By Alex Murray on 2019-07-09

apport/report.py: TOCTOU issue allows local user to read arbitrary files (LP: #1830858)

Avoid TOCTOU issue on users ignore file by dropping privileges and then
opening the file both test for access and open the file in a single
operation, instead of using access() before reading the file which could be
abused by a symlink to cause Apport to read and embed an arbitrary file in
the resulting crash dump.

CVE-2019-7307

3253. By Launchpad Translations on behalf of apport-hackers on 2019-06-05

Launchpad automatic translations update.

3252. By Launchpad Translations on behalf of apport-hackers on 2019-05-28

Launchpad automatic translations update.

3251. By Brian Murray on 2019-05-24

backends/packaging-apt-dpkg.py: add in /usr/games and /usr/libexec as paths for executables in the contents mapping.

3250. By Brian Murray on 2019-05-20

backends/packaging-apt-dpkg.py: writing the contents mapping pickle file can Traceback on systems with little memory so don't write it.

3249. By Brian Murray on 2019-05-20

bin/apport-valgrind: fix extraneous space

3248. By Brian Murray on 2019-05-20

test/test_backend_apt_dpkg.py: as of r3211 an error is not raised if the binary is not found

3247. By Brian Murray on 2019-05-20

bin/apport-unpack, problem_report.py: define unicode as a variable to quiet pyflakes

3246. By Brian Murray on 2019-05-20

problem_report.py, bin/apport-unpack: restore some python2 code because the Error Tracker retracers need it.

3245. By Launchpad Translations on behalf of apport-hackers on 2019-05-18

Launchpad automatic translations update.