~ubuntu-core-dev/ubuntu/utopic/apport/ubuntu : changes

~ubuntu-core-dev/ubuntu/utopic/apport/ubuntu » Changes from revision 2375

From Revision 2375 to 2356

Rev	Summary	Authors	Tags	Date
2375	releasing package apport version 2.14.7-0ubuntu8.5 releasing package apport version 2.14.7-0ubuntu8.5	Martin Pitt	2.14.7-0ubuntu8.5	8 years ago
2374	SECURITY UPDATE: When writing a core dump file for a crashed... SECURITY UPDATE: When writing a core dump file for a crashed packaged program, don't close and reopen the .crash report file but just rewind and re-read it. This prevents the user from modifying the .crash report file while "apport" is running to inject data and creating crafted core dump files. In conjunction with the above vulnerability of writing core dump files to arbitrary directories this could be exploited to gain root privileges. Thanks to Philip Pettersson for discovering this issue! (CVE-2015-1325, LP: #1453900)	Martin Pitt		8 years ago
2373	SECURITY UPDATE: When /proc/sys/fs/suid_dumpable is enabled,... SECURITY UPDATE: When /proc/sys/fs/suid_dumpable is enabled, crashing a program that is suid root or not readable for the user would create root-owned core files in the current directory of that program. Creating specially crafted core files in /etc/logrotate.d or similar could then lead to arbitrary code execution with root privileges. Now core files do not get written for these kinds of programs, in accordance with the intention of core(5). Thanks to Sander Bos for discovering this issue! (CVE-2015-1324, LP: #1452239)	Martin Pitt		8 years ago
2372	test_signal_crashes(): Drop hardcoded /tmp/ path in do_crash... test_signal_crashes(): Drop hardcoded /tmp/ path in do_crash(), test_nonwritable_cwd() uses a different dir.	Martin Pitt		8 years ago
2371	releasing package apport version 2.14.7-0ubuntu8.4 releasing package apport version 2.14.7-0ubuntu8.4	Martin Pitt	2.14.7-0ubuntu8.4	8 years ago
2370	* SECURITY UPDATE: insecure /proc/net/unix parsing (LP: #144... * SECURITY UPDATE: insecure /proc/net/unix parsing (LP: #1444518) - data/apport: temporarily disable container support until it can be re-written in a secure manner. - CVE number pending	Martin Pitt		8 years ago
2369	releasing package apport version 2.14.7-0ubuntu8.3 releasing package apport version 2.14.7-0ubuntu8.3	Martin Pitt	2.14.7-0ubuntu8.3	8 years ago
2368	* SECURITY UPDATE: privilege escalation through namespaces a... * SECURITY UPDATE: privilege escalation through namespaces and crafted chroot (LP: #1438345) - data/apport: If crash comes from a container, rather than chrooting into it, detect what LXC container it is and then use the attach_wait API call to execute apport in the container. - data/apport: Don't fail when encountering unicode characters. (Thanks to Martin Pitt) - test/test_signal_crashes.py: Test for the unicode fix. (Thanks to Martin Pitt) - CVE-2015-1318	Martin Pitt		8 years ago
2367	releasing package apport version 2.14.7-0ubuntu8.2 releasing package apport version 2.14.7-0ubuntu8.2	Brian Murray	2.14.7-0ubuntu8.2	9 years ago
2366	apport/ui.py: Only provide a UI to hooks if the crash db wil... apport/ui.py: Only provide a UI to hooks if the crash db will accept the report. This avoids asking questions if the report is merely sent to whoopsie for Ubuntu stable releases. (LP: #1084979)	Brian Murray		9 years ago
2365	releasing package apport version 2.14.7-0ubuntu8.1 releasing package apport version 2.14.7-0ubuntu8.1	Martin Pitt	2.14.7-0ubuntu8.1	9 years ago
2364	hookutils, attach_root_command_outputs(): Fix UnicodeDecodeE... hookutils, attach_root_command_outputs(): Fix UnicodeDecodeError crash for non-textual values. Cherry-picked from trunk r2890. (LP: #1370259)	Martin Pitt		9 years ago
2363	releasing package apport version 2.14.7-0ubuntu8 releasing package apport version 2.14.7-0ubuntu8	Martin Pitt	2.14.7-0ubuntu8	9 years ago
2362	etc/init.d/apport: Stop setting $PATH in the init.d script. ... etc/init.d/apport: Stop setting $PATH in the init.d script. It breaks assumptions from /lib/lsb/init-functions.d/ which might call other tools which are not in /bin; also, we generally shouldn't meddle with $PATH in individual scripts. (LP: #1372665)	Martin Pitt		9 years ago
2361	releasing package apport version 2.14.7-0ubuntu7 releasing package apport version 2.14.7-0ubuntu7	Martin Pitt	2.14.7-0ubuntu7	9 years ago
2360	Disable Launchpad crash upload for final Ubuntu 14.10. Disable Launchpad crash upload for final Ubuntu 14.10.	Martin Pitt		9 years ago
2359	releasing package apport version 2.14.7-0ubuntu6 releasing package apport version 2.14.7-0ubuntu6	Brian Murray	2.14.7-0ubuntu6	9 years ago
2358	data/recoverable_problem: Fix a Traceback with how the Value... data/recoverable_problem: Fix a Traceback with how the ValueError was matched. (LP: #1345569)	Brian Murray		9 years ago
2357	releasing package apport version 2.14.7-0ubuntu5 releasing package apport version 2.14.7-0ubuntu5	Brian Murray	2.14.7-0ubuntu5	9 years ago
2356	data/recoverable_problem: Handle the parent process going aw... data/recoverable_problem: Handle the parent process going away while we're attempting to read from proc. (LP: #1345569)	Brian Murray		9 years ago

Older »