apparmor 2.8.95~2430-0ubuntu5.1 source package in Ubuntu

Changelog

apparmor (2.8.95~2430-0ubuntu5.1) trusty-security; urgency=medium

  * SECURITY UPDATE: An AppArmor profile compilation bug may result in
    applications being confined in a way that is inconsistent with the profile
    author's intent. The compilation bug is specific to certain combinations
    of AppArmor rule types and conditionals of those rule types.
    (LP: #1390592)
    - debian/patches/fix-esc-seq-interp.patch: Fix the profile compilation bug
      by limiting the number of bytes that are consumed when interpreting
      hexadecimal, octal, and decimal escape sequences
    - debian/patches/tests-allow-arbitrary-profile-names.patch,
      debian/patches/tests-add-ptrace-tests-for-lp1390592.patch: Add
      regression tests for the profile compilation bug
    - CVE-2014-1424
 -- Tyler Hicks <email address hidden>   Fri, 14 Nov 2014 13:46:22 -0600

Upload details

Uploaded by:
Tyler Hicks
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
apparmor_2.8.95~2430.orig.tar.gz 2.1 MiB 78b0846fce04d3d2ea876fc37fcfe5d101e0da7634b6244d808cd03e5affc67d
apparmor_2.8.95~2430-0ubuntu5.1.debian.tar.gz 152.0 KiB 3f8ae2ab4b74840398d922f3a4eac7dd8a7b850e4aef8f437c7268d8f8b7de3f
apparmor_2.8.95~2430-0ubuntu5.1.dsc 2.9 KiB 72157cdc21260e62932686712aa5168a3a550a4c02b8c6bad06a504a14352be5

View changes file

Binary packages built by this source

apparmor: user-space parser utility for AppArmor

 This provides the system initialization scripts needed to use the
 AppArmor Mandatory Access Control system, including the AppArmor Parser
 which is required to convert AppArmor text profiles into machine-readable
 policies that are loaded into the kernel for use with the AppArmor Linux
 Security Module.

apparmor-docs: documentation for AppArmor

 This package provides some technical documentation for the AppArmor
 Mandatory Access Control system. Currently this is only a single
 PDF covering basic operation, written some time ago.

apparmor-easyprof: AppArmor easyprof profiling tool

 This provides the aa-easyprof utility which is an easy to use interface for
 AppArmor policy generation. aa-easyprof supports the use of templates and
 policy groups to quickly profile an application.

apparmor-notify: AppArmor notification system

 This package provides a utility to display AppArmor denial messages via
 desktop notifications. The utility can also be used to generate summary
 reports.

apparmor-profiles: profiles for AppArmor Security policies

 This provides various AppArmor profiles that have not been shipped by
 the packages they provide confinement for. By default, they ship in
 complain mode so that users can test and choose which are desired.

apparmor-utils: utilities for controlling AppArmor

 This provides the utilities to operate on AppArmor profiles. Profiles
 can be created, updated, enforced, set to complain mode, and disabled
 with tools such as aa-genprof, aa-enforce, aa-complain and aa-disabled.

dh-apparmor: AppArmor debhelper routines

 This provides the debhelper tools used to install and migrate AppArmor
 profiles. This is normally used from package maintainer scripts during
 install and removal.

libapache2-mod-apparmor: changehat AppArmor library as an Apache module

 This provides the Apache module needed to declare various differing
 confinement policies when running virtual hosts in the webserver
 by using the changehat abilities exposed through libapparmor.

libapparmor-dev: AppArmor development libraries and header files

 This package provides the development libraries and header files needed to
 link against the AppArmor changehat and log parsing functions. Also
 includes the manpages for library functions.

libapparmor-perl: AppArmor library Perl bindings

 This provides the Perl module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.

libapparmor1: changehat AppArmor library

 This package provides the shared library used for making use of the
 AppArmor profile and changehat functionality, as well as common log
 parsing routines.

libpam-apparmor: changehat AppArmor library as a PAM module

 This provides the PAM module needed to declare various differing
 confinement policies when starting PAM sessions by using the
 changehat abilities exposed through libapparmor.

python-apparmor: AppArmor Python utility library

 This provides the Python modules that implement the higher-level AppArmor
 applications.

python-libapparmor: AppArmor library Python bindings

 This provides the Python module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.

python3-apparmor: AppArmor Python3 utility library

 This provides the Python3 modules that implement the higher-level AppArmor
 applications.

python3-libapparmor: AppArmor library Python3 bindings

 This provides the Python3 module that contains the language bindings
 for the AppArmor library, libapparmor, which were autogenerated via
 SWIG.