USN-5122-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-5122-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5122-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-5122-1

Published

2021-10-25T10:56:03Z

Modified

2026-02-10T04:42:21Z

Summary

apport vulnerability

Details

It was discovered that Apport could be tricked into writing core files as root into arbitrary directories in certain scenarios. A local attacker could possibly use this issue to escalate privileges. This update will cause Apport to generate all core files in the /var/lib/apport/coredump directory.

References

Affected packages

Ubuntu:18.04:LTS / apport

Package

Name: apport
Purl: pkg:deb/ubuntu/apport@2.20.9-0ubuntu7.27?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.20.9-0ubuntu7.27

Affected versions

2.*

2.20.7-0ubuntu3

2.20.7-0ubuntu3.1

2.20.7-0ubuntu4

2.20.8-0ubuntu1

2.20.8-0ubuntu2

2.20.8-0ubuntu3

2.20.8-0ubuntu4

2.20.8-0ubuntu5

2.20.8-0ubuntu6

2.20.8-0ubuntu7

2.20.8-0ubuntu8

2.20.8-0ubuntu9

2.20.8-0ubuntu10

2.20.9-0ubuntu1

2.20.9-0ubuntu2

2.20.9-0ubuntu4

2.20.9-0ubuntu5

2.20.9-0ubuntu6

2.20.9-0ubuntu7

2.20.9-0ubuntu7.1

2.20.9-0ubuntu7.2

2.20.9-0ubuntu7.3

2.20.9-0ubuntu7.4

2.20.9-0ubuntu7.5

2.20.9-0ubuntu7.6

2.20.9-0ubuntu7.7

2.20.9-0ubuntu7.8

2.20.9-0ubuntu7.9

2.20.9-0ubuntu7.11

2.20.9-0ubuntu7.12

2.20.9-0ubuntu7.13

2.20.9-0ubuntu7.14

2.20.9-0ubuntu7.15

2.20.9-0ubuntu7.16

2.20.9-0ubuntu7.17

2.20.9-0ubuntu7.18

2.20.9-0ubuntu7.19

2.20.9-0ubuntu7.20

2.20.9-0ubuntu7.21

2.20.9-0ubuntu7.23

2.20.9-0ubuntu7.24

2.20.9-0ubuntu7.26

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "apport",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "apport-kde",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "apport-noui",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "dh-apport",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "python-apport",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "python-problem-report",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "python3-apport",
            "binary_version": "2.20.9-0ubuntu7.27"
        },
        {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.9-0ubuntu7.27"
        }
    ]
}

Database specific

cves_map

{
    "cves": [],
    "ecosystem": "Ubuntu:18.04:LTS"
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5122-1.json"

Ubuntu:20.04:LTS / apport

Package

Name: apport
Purl: pkg:deb/ubuntu/apport@2.20.11-0ubuntu27.21?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.20.11-0ubuntu27.21

Affected versions

2.*

2.20.11-0ubuntu8

2.20.11-0ubuntu9

2.20.11-0ubuntu13

2.20.11-0ubuntu14

2.20.11-0ubuntu15

2.20.11-0ubuntu16

2.20.11-0ubuntu17

2.20.11-0ubuntu18

2.20.11-0ubuntu19

2.20.11-0ubuntu20

2.20.11-0ubuntu21

2.20.11-0ubuntu22

2.20.11-0ubuntu24

2.20.11-0ubuntu25

2.20.11-0ubuntu26

2.20.11-0ubuntu27

2.20.11-0ubuntu27.2

2.20.11-0ubuntu27.3

2.20.11-0ubuntu27.4

2.20.11-0ubuntu27.6

2.20.11-0ubuntu27.8

2.20.11-0ubuntu27.9

2.20.11-0ubuntu27.10

2.20.11-0ubuntu27.11

2.20.11-0ubuntu27.12

2.20.11-0ubuntu27.13

2.20.11-0ubuntu27.14

2.20.11-0ubuntu27.16

2.20.11-0ubuntu27.17

2.20.11-0ubuntu27.18

2.20.11-0ubuntu27.20

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "apport",
            "binary_version": "2.20.11-0ubuntu27.21"
        },
        {
            "binary_name": "apport-gtk",
            "binary_version": "2.20.11-0ubuntu27.21"
        },
        {
            "binary_name": "apport-kde",
            "binary_version": "2.20.11-0ubuntu27.21"
        },
        {
            "binary_name": "apport-noui",
            "binary_version": "2.20.11-0ubuntu27.21"
        },
        {
            "binary_name": "apport-retrace",
            "binary_version": "2.20.11-0ubuntu27.21"
        },
        {
            "binary_name": "apport-valgrind",
            "binary_version": "2.20.11-0ubuntu27.21"
        },
        {
            "binary_name": "dh-apport",
            "binary_version": "2.20.11-0ubuntu27.21"
        },
        {
            "binary_name": "python3-apport",
            "binary_version": "2.20.11-0ubuntu27.21"
        },
        {
            "binary_name": "python3-problem-report",
            "binary_version": "2.20.11-0ubuntu27.21"
        }
    ]
}

Database specific

cves_map

{
    "cves": [],
    "ecosystem": "Ubuntu:20.04:LTS"
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5122-1.json"