Format: 1.8 Date: Tue, 06 Mar 2024 15:35:00 -0300 Source: apparmor Binary: apparmor libapache2-mod-apparmor libapparmor-dev libapparmor1 libpam-apparmor python3-libapparmor Built-For-Profiles: noudeb Architecture: armhf armhf_translations Version: 3.0.4-2ubuntu2.4 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Rodrigo Figueiredo Zaiden Description: apparmor - user-space parser utility for AppArmor libapache2-mod-apparmor - changehat AppArmor library as an Apache module libapparmor-dev - AppArmor development libraries and header files libapparmor1 - changehat AppArmor library libpam-apparmor - changehat AppArmor library as a PAM module python3-libapparmor - AppArmor library Python3 bindings Launchpad-Bugs-Fixed: 1597017 Changes: apparmor (3.0.4-2ubuntu2.4) jammy-security; urgency=medium . * SECURITY UPDATE: Excessive permissions with mount rules (LP: #1597017) - d/p/CVE-2016-1585/Merge-Fix-mount-rules-encoding.patch: fix mount rules encoding in parser/mount.cc, parser/mount.h, parser/parser.h and fix multiple test cases in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Support-rule-qualifiers-in-regression-tests.patch: update rule qualifiers in regression tests in tests/regression/apparmor/mkprofile.pl and tests/regression/apparmor/capabilities.sh. - d/p/CVE-2016-1585/Merge-expand-mount-tests.patch: expand mount regression tests in tests/regression/apparmor/mount.c, tests/regression/apparmor/mount.sh and tests/regression/apparmor/mkprofile.pl. - d/p/CVE-2016-1585/Check-for-newer-mount-options-in-regression-test.patch: add check for newer mount options in regression tests in tests/regression/apparmor/Makefile, tests/regression/apparmor/mount.c and tests/regression/apparmor/mount.sh. - d/p/CVE-2016-1585/Merge-Issue-312-added-missing-kernel-mount-options.patch: add missing kernel mount options flag in parser/apparmor.d.pod, parser/mount.cc, parser/mount.h, tests/regression/apparmor/mount.sh and parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-extend-test-profiles-for-mount.patch: update test profiles in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-parser-fix-parsing-of-source-as-mount-point-fo.patch: update gen_policy_change_mount_type() in parser/mount.cc and also updated tests on parser/tst/simple_tests/mount/* and tests/regression/apparmor/mount.sh. - d/p/CVE-2016-1585/parser-Deprecation-warning-should-not-have-been-back.patch: remove deprecation warning message in parser/mount.cc. - d/p/CVE-2016-1585/parser-fix-rule-flag-generation-change_mount-type-ru.patch: add device checks in gen_flag_rules() in parser/mount.cc and tests in parser/tst/simple_tests/mount/*, parser/tst/equality.sh, tests/regression/apparmor/mount.sh and utils/test/test-parser-simple-tests.py. - CVE-2016-1585 Checksums-Sha1: 7db7fa67dadd413aef9352933dbd90bb3eda3e0d 2313056 apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb ec0cc9fae4a9954af975f6940589ddf112968fb7 11651 apparmor_3.0.4-2ubuntu2.4_armhf.buildinfo f39d26b53e29ae56a5c0aa979bb20e0b52cfa35b 516390 apparmor_3.0.4-2ubuntu2.4_armhf.deb 088088b1d53256d171bfac74d9f27db9581eb7f2 347345 apparmor_3.0.4-2ubuntu2.4_armhf_translations.tar.gz d0a710cbc40c6de211eaa289c3588cbc3fcc3171 17182 libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 8718f3ab67afc89f62635e9e90913099ec9cb3df 14700 libapache2-mod-apparmor_3.0.4-2ubuntu2.4_armhf.deb c6147cc53efcef4e1946f166142df7282b6526eb 75282 libapparmor-dev_3.0.4-2ubuntu2.4_armhf.deb d73c73e3437ab1eb8be75147ea0a8eda0b5217cd 73472 libapparmor1-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb ebf440ed770c2a4374ee037e718beee8c7e1cc0e 34078 libapparmor1_3.0.4-2ubuntu2.4_armhf.deb 14242d117d753f20eab29599180be48cc292371c 7448 libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb c68fd6e8b2b7fdb31449ec3e73a6036365f51421 7180 libpam-apparmor_3.0.4-2ubuntu2.4_armhf.deb 1bd59370af90ac075bf5331c5d753b0af00de4c5 108614 python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 2a60fcab54202728ba455e4fd846db266efc6cc2 26574 python3-libapparmor_3.0.4-2ubuntu2.4_armhf.deb Checksums-Sha256: 6516cb8d45c03db34ca6bee137b88e384930bb8018ea784ba53dae711fa9c699 2313056 apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 89bad246286fe094c0e78d1410822868b3ae31bb6fce5c2aacbcb27790f4d4d9 11651 apparmor_3.0.4-2ubuntu2.4_armhf.buildinfo 9549c10ac174497139ee2edd6c2ca22eab0c34bc00391c7d731094b746a299e3 516390 apparmor_3.0.4-2ubuntu2.4_armhf.deb 0dc063fe28a59a4bf94aa55e904768af803cdd713b27574628ad6c93d72195b9 347345 apparmor_3.0.4-2ubuntu2.4_armhf_translations.tar.gz 60d0f93f4b0baad0571167663c35bb2a5812d9128e912f27c78e0eeed0640daf 17182 libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 0c475dbb6d662c31d7b182965fe44342fdffe9d9c9e6dcf73af9a5251a9caa56 14700 libapache2-mod-apparmor_3.0.4-2ubuntu2.4_armhf.deb f18c025c29a73239130a09226a41a28758d90074d48c2da671544152f4e1be35 75282 libapparmor-dev_3.0.4-2ubuntu2.4_armhf.deb f4a0347e7bd1cafeffedc235b1663573bd301c30381ba111c30e67cb4893988d 73472 libapparmor1-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 50c58e1aba839478cc5bf3ecf11962a8861a1cb66db797538188ac3126d2debb 34078 libapparmor1_3.0.4-2ubuntu2.4_armhf.deb 7ea6c6988dd6abce7af23c0fa798f62384472ad92d1cf2ea14864c4658fbceef 7448 libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb b06eb610ef2b34d7fcf743a8514d1cba5d4e9480dbc44a9cec705f5d6039959c 7180 libpam-apparmor_3.0.4-2ubuntu2.4_armhf.deb 6f3ada64b20a687904c57e2cb2028199c9a25c139b6eb2cc9208385b6805a2c3 108614 python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb c80f65d1951ca3b5ac98485584afbeff65d5adc4a67c8c6347d5b2baba8a6686 26574 python3-libapparmor_3.0.4-2ubuntu2.4_armhf.deb Files: 18b26c827c662b30960ee25ecb7e3ce2 2313056 debug optional apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 268156a9fc55e335141245534ce6977c 11651 admin optional apparmor_3.0.4-2ubuntu2.4_armhf.buildinfo 107bcec2709f2b7e020d1199172b9a82 516390 admin optional apparmor_3.0.4-2ubuntu2.4_armhf.deb e18f3c97aa555bb8f9012a86bab3949a 347345 raw-translations - apparmor_3.0.4-2ubuntu2.4_armhf_translations.tar.gz 906de65c01fc14a3a9fcc67cfb20128a 17182 debug optional libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 06ae4698144b6113018b59ad0fa41d29 14700 httpd optional libapache2-mod-apparmor_3.0.4-2ubuntu2.4_armhf.deb f90b85fbca4839f1883c6490286c579b 75282 libdevel optional libapparmor-dev_3.0.4-2ubuntu2.4_armhf.deb acb034894f90fb38161621df77ea0d64 73472 debug optional libapparmor1-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 2826ec36fa8f10da60cd126694f9fc04 34078 libs optional libapparmor1_3.0.4-2ubuntu2.4_armhf.deb 0f2a7a7c4c6a584d875b4ca2412dcd04 7448 debug optional libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb 284a535c3acd768cfaeaf0ccf60db002 7180 admin optional libpam-apparmor_3.0.4-2ubuntu2.4_armhf.deb b506e64d1a699438caf8ce5c24417921 108614 debug optional python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_armhf.ddeb ca19f0b68bc32a12f0bb9895b5b42631 26574 python optional python3-libapparmor_3.0.4-2ubuntu2.4_armhf.deb Original-Maintainer: Debian AppArmor Team