lp:~laney/apport/no-yalign

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:~apport-hackers/apport/trunk at revision 2967

Martin Pitt (community): Approve on 2015-06-05

Diff: 12 lines (+1/-1)

1 file modified

gtk/apport-gtk.ui (+1/-1)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

2967. By Iain Lane on 2015-06-05

Use GtkWidget::valign property instead of GtkMisc::yalign which is deprecated in GTK 3.16

2966. By Launchpad Translations on behalf of apport-hackers on 2015-05-29

Launchpad automatic translations update.

2965. By Martin Pitt on 2015-05-28

Fix backend_apt_dpkg.test_install_packages_permanent_sandbox test to restore proxy settings at the right time

2964. By Martin Pitt on 2015-05-28

* init.d script: Fix tab usage inconsistencies.

2963. By Martin Pitt on 2015-05-28

* Enable suid_dumpable in the init.d script to also get Apport reports about suid, unreadable, and otherwise protected binaries. These will be "system reports" owned and readable by root only.

2962. By Martin Pitt on 2015-05-28

* Fix backend_apt_dpkg.test_install_packages_permanent_sandbox test to more carefully restore the environment and apt config.

2961. By Martin Pitt on 2015-05-20

release 2.17.3

2960. By Martin Pitt on 2015-05-20

* test/run: Run UI tests under dbus-launch, newer GTK versions require this now.

2959. By Martin Pitt on 2015-05-13

.bzrignore: add __pycache__

2958. By Martin Pitt on 2015-05-13

SECURITY UPDATE: Fix core dump file injection

When writing a core dump file for a crashed packaged program, don't close and
reopen the .crash report file but just rewind and re-read it. This prevents the
user from modifying the .crash report file while "apport" is running to inject
data and creating crafted core dump files.

By itself this is not a vulnerability, but in conjunction with the previous
vulnerability of writing core dump files to arbitrary directories
(CVE-2015-1324) this could be exploited to gain root privileges, by writing a
crafted "core" file to /etc/sudoers.d/, /etc/cron.d, or similar.

Thanks to Philip Pettersson for discovering this issue!

CVE-2015-1325
LP: #1453900