This bug was fixed in the package apport - 2.17.2-0ubuntu1
---------------
apport (2.17.2-0ubuntu1) vivid; urgency=medium
* New upstream bug fix release:
- SECURITY UPDATE: Disable crash forwarding to containers. The previous
fix in 2.17.1 was not sufficient against all attack scenarios. By
binding to specially crafted sockes, a normal user program could forge
arbitrary entries in /proc/net/unix. We cannot currently rely on a
kernel-side solution for this; this feature will be re-enabled once it
gets re-done to be secure. (LP: #1444518)
- apport-kde: Fix crash when showing byte array values. Thanks Jonathan
Riddell. (LP: #1443659)
- Really create a better duplicate signature for recoverable problems,
using ExecutablePath. Thanks Brian Murray. (LP: #1316763)
* Disable Launchpad crash upload for final Ubuntu 15.04.
-- Martin Pitt <[email protected]> Thu, 16 Apr 2015 17:51:18 -0500
** Changed in: apport (Ubuntu)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1316763
Title:
bucketing of recoverable problems is done poorly
To manage notifications about this bug go to:
https://bugs.launchpad.net/daisy/+bug/1316763/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
