CVE-2015-1341 Apport privilege escalation through Python module imports

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function pythonmodulepath...

CVE-2015-1341

Summary (CVE-2015-1341) : The Ubuntu/apport vulnerability allows a local attacker to escalate privileges by abusing Python module imports. Specifically, if the triggering process runs Python with the first argument -m and triggers a coredump, any Python module on sys.path could be imported by App...

[USN-2782-1] Apport vulnerability

========================================================================== Ubuntu Security Notice USN-2782-1 October 27, 2015 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...