Sander Bos

Race condition between reading current working directory and writing a core dump

Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privilege

Insecure temporary file use in base-files

apport created lock file in wrong directory