Skip to content
fr Sign in
7.3 High

CVE-2021-32554 It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs

Description

It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.

Affected products and versions

Product Affected versions Fixed in
apport 2.20 2.20.1 → < 2.20.11-0ubuntu65.1 2.20.1-0ubuntu2.30+esm1
apport 2.14 2.14.1-0ubuntu3 → < 2.14.1-0ubuntu3.29+esm7 2.14.1-0ubuntu3.29+esm7

References

Timeline

  1. Published
  2. Last modified

Other CVEs of apport

The 29 CVEs of apport →
CVE-2026-77113 Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to… 6.7 Medium CVE-2025-5467 It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash… 1.9 Low CVE-2025-5054 Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information… 4.7 Medium CVE-2022-28657 Apport does not disable python crash handler before entering chroot 7.8 High
Track this CVE