Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 533
Alerts This Week
Warning Icon 1 533

Ubuntu 16.04 ESM: USN-5122-2 Moderate: Apport File Issue

ubuntu
Calendar Grey October 26, 2021
Dist Ubuntu Esm H88
The Apport weakness identified in various Ubuntu versions enables unauthorized file generation with elevated privileges. It's crucial to mitigate this security flaw without delay.
Apport could be made to create files as the administrator.

Summary

Apport could be made to create files as the administrator.

Software Description:

- apport: automatically generate crash reports for debugging

Details:

USN-5122-1 fixed a vulnerability in Apport. This update provides

the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Apport could be tricked into writing core files as

root into arbitrary directories in certain scenarios. A local attacker

could possibly use this issue to escalate privileges. On Ubuntu 16.04 ESM

This update will cause Apport to generate all core files in the /var/lib/apport/coredump

directory. On Ubuntu 14.04 ESM, core file generation has been disabled by default.

Topics%20covered

Topics Covered

security advisory moderate security issue Ubuntu local escalation file creation apport

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  apport                          2.20.1-0ubuntu2.30+esm3
  python3-apport                  2.20.1-0ubuntu2.30+esm3

Ubuntu 14.04 ESM:
  apport                          2.14.1-0ubuntu3.29+esm9
  python3-apport                  2.14.1-0ubuntu3.29+esm9

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5122-2

https://ubuntu.com/security/notices/USN-5122-1

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1948657

Severity
important
Lowest
Low
Medium
High
Critical

October 26, 2021

Topics%20covered

Topics Covered

security advisory moderate security issue Ubuntu local escalation file creation apport

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.