[ubuntu/bionic-security] apport 2.20.9-0ubuntu7.29+esm3 (Accepted)

[Octavio Galland]

apport (2.20.9-0ubuntu7.29+esm3) bionic-security; urgency=medium

  * SECURITY REGRESSION: exception during core dump handling (LP: #2112466)
    - data/apport: Catch FileNotFoundError when trying to open /proc/<pid>.
    - test/run: Use pyflakes3 instead of pyflakes for python3 files.

apport (2.20.9-0ubuntu7.29+esm2) bionic-security; urgency=medium

  * SECURITY REGRESSION: apport not generating core dumps inside containers
    (LP: #2112272)
    - data/apport: Check the exe mtime within the proc root mount.

apport (2.20.9-0ubuntu7.29+esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: Insecure report permissions (LP: #2106338)
    - data/apport: Do not change report group to report owners primary group.
    - CVE-2025-5467
  * SECURITY UPDATE: Race condition when forwarding core files to containers
    (LP: #2107472)
    - data/apport: Do not override options.pid.
    - data/apport: Open /proc/<pid> as early as possible.
    - data/fileutils.py: Respect proc_pid_fd in get_core_path.
    - test/test_fileutils.py: Respect proc_pid_fd in get_core_path.
    - data/apport: Use opened /proc/<pid> everywhere.
    - data/apport: Do consistency check before forwarding crashes.
    - data/apport: Require --dump-mode to be specified.
    - data/apport: Determine report owner by dump_mode.
    - test/test_signal_crashes.py: Determine report owner by dump_mode.
    - data/apport: Do not forward crash for dump_mode == 2.
    - data/apport: Support pidfd (%F) parameter from kernel.
    - etc/init.d/apport: Support pidfd (%F) parameter from kernel.
    - CVE-2025-5054

Date: 2025-07-11 15:04:19.830039+00:00
Changed-By: Octavio Galland <octavio.galland at canonical.com>
https://launchpad.net/ubuntu/+source/apport/2.20.9-0ubuntu7.29+esm3
-------------- next part --------------
Sorry, changesfile not available.