Does the Asterisk core dump files contain information that would expose my Asterisk or its users? We have an issue which we have managed to capture, however in a production system.
Now I can create a Github issue with the core dump and the necessary information but I cannot if it contains sensitive information.
A core dump is a snapshot of the memory at the point in time, so yes. Generally a core dump is also not initially requested (and a core dump alone is useless) but a backtrace is. A backtrace is text that you can then modify, if needed, to hide any sensitive information.
Please also ensure that you are using a supported version of Asterisk[1] and the most recent version of the supported branch.