A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.04 - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: USN-7545-1 introduced a regression in Apport. Software Description: - apport: automatically generate crash reports for debugging Details: USN-7545-1 fixed a vulnerability in Apport. The update introduced a regression that prevented core dumps from being generated inside containers. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered that Apport incorrectly handled metadata when processing application crashes. An attacker could possibly use this issue to leak sensitive information.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.04 apport 2.32.0-0ubuntu5.2 python3-apport 2.32.0-0ubuntu5.2 Ubuntu 24.10 apport 2.30.0-0ubuntu4.4 python3-apport 2.30.0-0ubuntu4.4 Ubuntu 24.04 LTS apport 2.28.1-0ubuntu3.7 python3-apport 2.28.1-0ubuntu3.7 Ubuntu 22.04 LTS apport 2.20.11-0ubuntu82.8 python3-apport 2.20.11-0ubuntu82.8 Ubuntu 20.04 LTS apport 2.20.11-0ubuntu27.29 python3-apport 2.20.11-0ubuntu27.29 Ubuntu 18.04 LTS apport 2.20.9-0ubuntu7.29+esm2 Available with Ubuntu Pro python-apport 2.20.9-0ubuntu7.29+esm2 Available with Ubuntu Pro python3-apport 2.20.9-0ubuntu7.29+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS apport 2.20.1-0ubuntu2.30+esm6 Available with Ubuntu Pro python-apport 2.20.1-0ubuntu2.30+esm6 Available with Ubuntu Pro python3-apport 2.20.1-0ubuntu2.30+esm6 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
https://launchpad.net/ubuntu/+source/apport/2.32.0-0ubuntu5.2 https://launchpad.net/ubuntu/+source/apport/2.30.0-0ubuntu4.4 https://launchpad.net/ubuntu/+source/apport/2.28.1-0ubuntu3.7 https://launchpad.net/ubuntu/+source/apport/2.20.11-0ubuntu82.8 https://launchpad.net/ubuntu/+source/apport/2.20.11-0ubuntu27.29
Get the latest Linux and open source security news straight to your inbox.