Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-5467

No fix known EPSS <1%CVSS 1.9

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.

Published 2025-12-10 · CVE record · OSV

Products: Canonical apport