~ubuntu-core-dev/ubuntu/impish/apport/ubuntu : changes

~ubuntu-core-dev/ubuntu/impish/apport/ubuntu » Changes from revision 2872

From Revision 2872 to 2853

Rev	Summary	Authors	Tags	Date
2872	* SECURITY UPDATE: Privilege escalation via core files * SECURITY UPDATE: Privilege escalation via core files - refactor privilege dropping and create core files in a well-known directory in apport/fileutils.py, apport/report.py, data/apport, test/test_fileutils.py, test/test_report.py, test/test_signal_crashes.py, test/test_ui.py. - use systemd-tmpfiles to create and manage the well-known core file directory in setup.py, data/systemd/apport.conf, debian/apport.install.	Brian Murray		2 years ago
2871	releasing package apport version 2.20.11-0ubuntu70 releasing package apport version 2.20.11-0ubuntu70	Brian Murray	2.20.11-0ubuntu70	2 years ago
2870	* etc/apport/crashdb.conf: Disable Launchpad crash reports f... * etc/apport/crashdb.conf: Disable Launchpad crash reports for 21.10 release. * debian/tests/upstream-system: Set /proc/sys/kernel/core_uses_pid to 0 as that's the easiest way to fix tests that expect the core file to be named core and not core.PID	Brian Murray		2 years ago
2869	releasing package apport version 2.20.11-0ubuntu69 releasing package apport version 2.20.11-0ubuntu69	Brian Murray	2.20.11-0ubuntu69	2 years ago
2868	* SECURITY UPDATE: Arbitrary file read (LP: #1934308) * SECURITY UPDATE: Arbitrary file read (LP: #1934308) - data/general-hooks/ubuntu.py: don't attempt to include emacs byte-compilation logs, they haven't been generated by the emacs packages in a long time. - CVE-2021-3709 * SECURITY UPDATE: Info disclosure via path traversal (LP: #1933832) - apport/hookutils.py, test/test_hookutils.py: detect path traversal attacks, and directory symlinks. - CVE-2021-3710	Brian Murray		2 years ago
2867	releasing package apport version 2.20.11-0ubuntu68 releasing package apport version 2.20.11-0ubuntu68	Brian Murray	2.20.11-0ubuntu68	2 years ago
2866	* backends/packaging-apt-dpkg.py: check to see if there is a... * backends/packaging-apt-dpkg.py: check to see if there is a different package which provides the dependency. * test/test_report.py: with glibc 2.34 abort tests started failing as the backtrace didn't have a program counter value in frame 1 so check frame 1 or frame 2.	Brian Murray		2 years ago
2865	data/package-hooks/source_ubiquity.py: confirm that the key ... data/package-hooks/source_ubiquity.py: confirm that the key exists in the report before trying to manipulate it. (LP: #1929292)	Brian Murray		2 years ago
2864	releasing package apport version 2.20.11-0ubuntu67 releasing package apport version 2.20.11-0ubuntu67	Brian Murray	2.20.11-0ubuntu67	2 years ago
2863	* SECURITY UPDATE: Multiple arbitrary file reads (LP: #19179... * SECURITY UPDATE: Multiple arbitrary file reads (LP: #1917904) - apport/hookutils.py: don't follow symlinks and make sure the file isn't a FIFO in read_file(). - test/test_hookutils.py: added symlink tests. - CVE-2021-32547, CVE-2021-32548, CVE-2021-32549, CVE-2021-32550, CVE-2021-32551, CVE-2021-32552, CVE-2021-32553, CVE-2021-32554, CVE-2021-32555 * SECURITY UPDATE: info disclosure via modified config files spoofing (LP: #1917904) - backends/packaging-apt-dpkg.py: properly terminate arguments in get_modified_conffiles. - CVE-2021-32556 * SECURITY UPDATE: arbitrary file write (LP: #1917904) - data/whoopsie-upload-all: don't follow symlinks and make sure the file isn't a FIFO in process_report(). - CVE-2021-32557	Brian Murray		2 years ago
2862	releasing package apport version 2.20.11-0ubuntu66 releasing package apport version 2.20.11-0ubuntu66	Brian Murray	2.20.11-0ubuntu66	3 years ago
2861	etc/apport/crashdb.conf: Enable Launchpad crash reports for ... etc/apport/crashdb.conf: Enable Launchpad crash reports for impish.	Brian Murray		3 years ago
2860	releasing package apport version 2.20.11-0ubuntu65 releasing package apport version 2.20.11-0ubuntu65	Brian Murray	2.20.11-0ubuntu65	3 years ago
2859	test/test_backend_apt_dpkg.py: libc6 recommends packages, so... test/test_backend_apt_dpkg.py: libc6 recommends packages, some of which are not installed on buildds now, so switch to testing libc-bin which only has dependencies and is what the test is supposed to test.	Brian Murray		3 years ago
2858	releasing package apport version 2.20.11-0ubuntu64 releasing package apport version 2.20.11-0ubuntu64	Brian Murray	2.20.11-0ubuntu64	3 years ago
2857	apport/hookutils.py: Do not crash when deleting CasperMD5jso... apport/hookutils.py: Do not crash when deleting CasperMD5json from the report. (LP: #1923541)	Brian Murray		3 years ago
2856	releasing package apport version 2.20.11-0ubuntu63 releasing package apport version 2.20.11-0ubuntu63	Brian Murray	2.20.11-0ubuntu63	3 years ago
2855	etc/apport/crashdb.conf: Disable Launchpad crash reports for... etc/apport/crashdb.conf: Disable Launchpad crash reports for 21.04 release.	Brian Murray		3 years ago
2854	releasing package apport version 2.20.11-0ubuntu62 releasing package apport version 2.20.11-0ubuntu62	Brian Murray	2.20.11-0ubuntu62	3 years ago
2853	apport/hookutils.py: root access is needed to read the apport/hookutils.py: root access is needed to read the casper-md5check.json file so switch to using that. (LP: #1922937)	Brian Murray		3 years ago

Older »