--===============7903670141877876276==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="IS0zKkzwUGydFO0o"
Content-Disposition: inline


--IS0zKkzwUGydFO0o
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-5122-2
October 26, 2021

apport vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM

Summary:

Apport could be made to create files as the administrator.

Software Description:
- apport: automatically generate crash reports for debugging

Details:

USN-5122-1 fixed a vulnerability in Apport. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

 It was discovered that Apport could be tricked into writing core files as
 root into arbitrary directories in certain scenarios. A local attacker
 could possibly use this issue to escalate privileges. On Ubuntu 16.04 ESM
 This update will cause Apport to generate all core files in the
 /var/lib/apport/coredump
 directory. On Ubuntu 14.04 ESM, core file generation has been disabled by
 default.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  apport                          2.20.1-0ubuntu2.30+esm3
  python3-apport                  2.20.1-0ubuntu2.30+esm3

Ubuntu 14.04 ESM:
  apport                          2.14.1-0ubuntu3.29+esm9
  python3-apport                  2.14.1-0ubuntu3.29+esm9

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5122-2
  https://ubuntu.com/security/notices/USN-5122-1
  https://launchpad.net/bugs/1948657

--IS0zKkzwUGydFO0o
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=mCz+
-----END PGP SIGNATURE-----

--IS0zKkzwUGydFO0o--


--===============7903670141877876276==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce