Format string bugs in apparmor-utils
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AppArmor |
Fix Released
|
Undecided
|
Unassigned | ||
2.6 |
Fix Committed
|
Low
|
Unassigned | ||
apparmor (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: apparmor-utils
/usr/sbin/audit and /usr/sbin/autodep and /usr/sbin/enforce have format string bugs .
test case :
emanuel@
Modification of a read-only value attempted at /usr/sbin/audit line 122.
emanuel@
Modification of a read-only value attempted at /usr/sbin/autodep line 112.
emanuel@
Integer overflow in format string for sprintf at /usr/sbin/enforce line 132.
the bug can be found at :
UI_Info(
fix : (like in /usr/sbin/complain)
UI_Info(
Changed in apparmor (Ubuntu): | |
status: | New → Confirmed |
Changed in apparmor: | |
status: | New → Confirmed |
Thanks for the report! I've sent a patch to the mailing list and this will likely get committed soon.