[ubuntu/vivid-proposed] apport 2.17.2-0ubuntu1 (Accepted)

[Martin Pitt]

apport (2.17.2-0ubuntu1) vivid; urgency=medium

  * New upstream bug fix release:
    - SECURITY UPDATE: Disable crash forwarding to containers. The previous
      fix in 2.17.1 was not sufficient against all attack scenarios. By
      binding to specially crafted sockes, a normal user program could forge
      arbitrary entries in /proc/net/unix. We cannot currently rely on a
      kernel-side solution for this; this feature will be re-enabled once it
      gets re-done to be secure. (LP: #1444518)
    - apport-kde: Fix crash when showing byte array values. Thanks Jonathan
      Riddell. (LP: #1443659)
    - Really create a better duplicate signature for recoverable problems,
      using ExecutablePath. Thanks Brian Murray. (LP: #1316763)
  * Disable Launchpad crash upload for final Ubuntu 15.04.

Date: Thu, 16 Apr 2015 17:51:18 -0500
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
https://launchpad.net/ubuntu/+source/apport/2.17.2-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 16 Apr 2015 17:51:18 -0500
Source: apport
Binary: apport python-problem-report python3-problem-report python-apport python3-apport apport-retrace apport-valgrind apport-gtk apport-kde dh-apport apport-noui
Architecture: source
Version: 2.17.2-0ubuntu1
Distribution: vivid
Urgency: medium
Maintainer: Martin Pitt <martin.pitt at ubuntu.com>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description:
 apport     - automatically generate crash reports for debugging
 apport-gtk - GTK+ frontend for the apport crash report system
 apport-kde - KDE frontend for the apport crash report system
 apport-noui - tools for automatically reporting Apport crash reports
 apport-retrace - tools for reprocessing Apport crash reports
 apport-valgrind - valgrind wrapper that first downloads debug symbols
 dh-apport  - debhelper extension for the apport crash report system
 python-apport - Python library for Apport crash report handling
 python-problem-report - Python library to handle problem reports
 python3-apport - Python 3 library for Apport crash report handling
 python3-problem-report - Python 3 library to handle problem reports
Launchpad-Bugs-Fixed: 1316763 1443659 1444518
Changes:
 apport (2.17.2-0ubuntu1) vivid; urgency=medium
 .
   * New upstream bug fix release:
     - SECURITY UPDATE: Disable crash forwarding to containers. The previous
       fix in 2.17.1 was not sufficient against all attack scenarios. By
       binding to specially crafted sockes, a normal user program could forge
       arbitrary entries in /proc/net/unix. We cannot currently rely on a
       kernel-side solution for this; this feature will be re-enabled once it
       gets re-done to be secure. (LP: #1444518)
     - apport-kde: Fix crash when showing byte array values. Thanks Jonathan
       Riddell. (LP: #1443659)
     - Really create a better duplicate signature for recoverable problems,
       using ExecutablePath. Thanks Brian Murray. (LP: #1316763)
   * Disable Launchpad crash upload for final Ubuntu 15.04.
Checksums-Sha1:
 b9884b87698cfc68162aa003282ba7201f7af60e 2888 apport_2.17.2-0ubuntu1.dsc
 1f311bdb5073938bc028359aa40e07d676dc6bc8 1295783 apport_2.17.2.orig.tar.gz
 5cb560d189baa886dfc3f6a36da290e85784c85f 144125 apport_2.17.2-0ubuntu1.diff.gz
Checksums-Sha256:
 de84a487fdc1ed89971437384f07ec4177a9ed6f0441a19f08c18f67a0f620b7 2888 apport_2.17.2-0ubuntu1.dsc
 ccf58f686f5b313efa73b8a6c09cbf749a1a1cf168ea6c373235a6b7e9023852 1295783 apport_2.17.2.orig.tar.gz
 118bba7789e91f2d9e15e3d7c63758eb7c45c0b92dafa6e1f0a425997a09a03c 144125 apport_2.17.2-0ubuntu1.diff.gz
Files:
 0933d6957ea72da6c4d8332d26ecd37d 2888 utils optional apport_2.17.2-0ubuntu1.dsc
 d77725a578f027bc7ba533b99a53a414 1295783 utils optional apport_2.17.2.orig.tar.gz
 948dcd8ccc9c5adbb8d27c50deacb6a4 144125 utils optional apport_2.17.2-0ubuntu1.diff.gz