Bug number - 924397

Part of package: corekeeper.

Bug description:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
Debian Bug report logs -  #924397 corekeeper: insecure use of world-writable /var/crash
Package:      corekeeper; Maintainer for corekeeper is Paul Wise <pabs@debian.org>; Source for corekeeper is src:corekeeper (PTS, buildd, popcon).
Reported by: Jakub Wilk <jwilk@jwilk.net>
Date: Tue, 12 Mar 2019 14:54:01 UTC
Severity: critical
Tags: patch, security
Found in version corekeeper/1.6
Fixed in versions corekeeper/1.7, corekeeper/1.7~deb9u1
Done: Paul Wise <pabs@debian.org>
Bug is archived. No further changes may be made.

All x-patch and x-diff attachments.



PatchAuthorDate
0001-Do-not-use-a-world-writable-var-crash-with-the-dumpe.patchPaul Wise <pabs@debian.org>Wed, 13 Mar 2019 14:18:32 +0800
0001-Do-not-use-a-world-writable-var-crash-with-the-dumpe.patchPaul Wise <pabs@debian.org>Fri, 05 Apr 2019 11:58:24 +0800

Original bug report here.