Apport does not disable python crash handler before entering chroot

Apport can be tricked into connecting to arbitrary sockets as the root user

There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root

Users can consume unlimited disk space in /var/crash

is_closing_session() allows users to create arbitrary tcp dbus connections