It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users.
CPE | Name | Operator | Version |
---|---|---|---|
ubuntu_linux | eq | 18.04 | |
ubuntu_linux | eq | 20.04 | |
ubuntu_linux | eq | 20.10 | |
ubuntu_linux | eq | 21.10 | |
ubuntu_linux | eq | 21.04 |