NuytsTech Security

CVE-2021-32549

by ·

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to other local users.

Date published : 2021-06-11

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904

Tags: