What is GHSA-m4rr-rf2f-g267?

GHSA-m4rr-rf2f-g267 is a security advisory published by GitHub Security Advisories with Medium severity. Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux...

Which CVE IDs does GHSA-m4rr-rf2f-g267 cover?

GHSA-m4rr-rf2f-g267 covers the following CVE IDs: CVE-2026-77113. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-m4rr-rf2f-g267Medium

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux...

Vendor

GitHub Security Advisories

Published

August 21, 2026

Last Modified

August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-77113 →

📋 Description

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-77113
https://github.com/canonical/apport/pull/646
https://launchpad.net/bugs/2161697
https://github.com/advisories/GHSA-m4rr-rf2f-g267