Format: 1.8 Date: Tue, 06 Mar 2024 15:35:00 -0300 Source: apparmor Binary: apparmor libapache2-mod-apparmor libapparmor-dev libapparmor1 libpam-apparmor python3-libapparmor Built-For-Profiles: noudeb Architecture: i386 i386_translations Version: 3.0.4-2ubuntu2.4 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Rodrigo Figueiredo Zaiden Description: apparmor - user-space parser utility for AppArmor libapache2-mod-apparmor - changehat AppArmor library as an Apache module libapparmor-dev - AppArmor development libraries and header files libapparmor1 - changehat AppArmor library libpam-apparmor - changehat AppArmor library as a PAM module python3-libapparmor - AppArmor library Python3 bindings Launchpad-Bugs-Fixed: 1597017 Changes: apparmor (3.0.4-2ubuntu2.4) jammy-security; urgency=medium . * SECURITY UPDATE: Excessive permissions with mount rules (LP: #1597017) - d/p/CVE-2016-1585/Merge-Fix-mount-rules-encoding.patch: fix mount rules encoding in parser/mount.cc, parser/mount.h, parser/parser.h and fix multiple test cases in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Support-rule-qualifiers-in-regression-tests.patch: update rule qualifiers in regression tests in tests/regression/apparmor/mkprofile.pl and tests/regression/apparmor/capabilities.sh. - d/p/CVE-2016-1585/Merge-expand-mount-tests.patch: expand mount regression tests in tests/regression/apparmor/mount.c, tests/regression/apparmor/mount.sh and tests/regression/apparmor/mkprofile.pl. - d/p/CVE-2016-1585/Check-for-newer-mount-options-in-regression-test.patch: add check for newer mount options in regression tests in tests/regression/apparmor/Makefile, tests/regression/apparmor/mount.c and tests/regression/apparmor/mount.sh. - d/p/CVE-2016-1585/Merge-Issue-312-added-missing-kernel-mount-options.patch: add missing kernel mount options flag in parser/apparmor.d.pod, parser/mount.cc, parser/mount.h, tests/regression/apparmor/mount.sh and parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-extend-test-profiles-for-mount.patch: update test profiles in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-parser-fix-parsing-of-source-as-mount-point-fo.patch: update gen_policy_change_mount_type() in parser/mount.cc and also updated tests on parser/tst/simple_tests/mount/* and tests/regression/apparmor/mount.sh. - d/p/CVE-2016-1585/parser-Deprecation-warning-should-not-have-been-back.patch: remove deprecation warning message in parser/mount.cc. - d/p/CVE-2016-1585/parser-fix-rule-flag-generation-change_mount-type-ru.patch: add device checks in gen_flag_rules() in parser/mount.cc and tests in parser/tst/simple_tests/mount/*, parser/tst/equality.sh, tests/regression/apparmor/mount.sh and utils/test/test-parser-simple-tests.py. - CVE-2016-1585 Checksums-Sha1: 2c405c6592ecd7bcddb4f620f88cf00086de2cca 2306528 apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb ef59d67f8f2eebb8df629518a566ba334e463795 11682 apparmor_3.0.4-2ubuntu2.4_i386.buildinfo 2bb613ab61fcccb0cda77e6d7ca8f647c2511bcf 640408 apparmor_3.0.4-2ubuntu2.4_i386.deb ad9026a033500408fed3386bcb495eeb7821106b 354676 apparmor_3.0.4-2ubuntu2.4_i386_translations.tar.gz a7cac39e1a296c6cb8c54301edea3ca238d44cdc 15454 libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb b1a5a9c264e9a6691c650c69a2d7ca0d803f252d 15390 libapache2-mod-apparmor_3.0.4-2ubuntu2.4_i386.deb 38bc89603505d036c0cb5968dfd3049df68dbeee 82430 libapparmor-dev_3.0.4-2ubuntu2.4_i386.deb 4c1c9f15c076a6d68dbaf573b3b37cc0bd44be27 66174 libapparmor1-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 14f668bbfdd8ff2ad0abc2a5dae8fdfe194f2bdc 41596 libapparmor1_3.0.4-2ubuntu2.4_i386.deb 5150864b21ff7aa3bed328222176cbc8aba6f8af 6916 libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb b1b537bfd1be2e8f53acd2df25ab37612e59cc59 7864 libpam-apparmor_3.0.4-2ubuntu2.4_i386.deb 9b5056a6a85475cad5ae886695f2eb0747ba8a2f 94114 python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb c3d4028c02999d9d767c489468a642e26ab12a76 30060 python3-libapparmor_3.0.4-2ubuntu2.4_i386.deb Checksums-Sha256: 5cabcb4b25f4c79a28fe005230f14ca1839a3acbe47e94d8b1ee8640aa5d314d 2306528 apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 463d1a3a2708307cc62cf06982b5f0e82c11983df62729d8c7508cbd83c1ca7b 11682 apparmor_3.0.4-2ubuntu2.4_i386.buildinfo 5ec3100ce8d5fb53874e095151d93b3c1974f2ea566237db225a1e14bb8b09da 640408 apparmor_3.0.4-2ubuntu2.4_i386.deb 57cc85421233499929216c9532637548e17e270bfd036f51c9b9563406291c27 354676 apparmor_3.0.4-2ubuntu2.4_i386_translations.tar.gz a8de006b6322ff5d61f9e059536e6671c79cd0dcd1e8f6f9b2cdbf8c9c384646 15454 libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 27c67587d68216889a8fef913f9f149191a56dd92b705415bd22421f66aba325 15390 libapache2-mod-apparmor_3.0.4-2ubuntu2.4_i386.deb e58a367c37e54e9c25d8803380d353ce324bf0d3153206497071fd8af6430b56 82430 libapparmor-dev_3.0.4-2ubuntu2.4_i386.deb deba4f5b37773ca62c1b327e7833879af6485267883b65e34ef95eb05ff4a511 66174 libapparmor1-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 2ff36b9e2be2f4ccec550bd8526b36f045c15abfdf1041c79c2d870691740929 41596 libapparmor1_3.0.4-2ubuntu2.4_i386.deb f26f681c2c6a288f2058010efee749065a880790c21111b3b68d2ab4b1f0e94f 6916 libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 778d82241439c80adf5a19cef400f2765efccddfc3b1068c0ef9071d8f04d7a2 7864 libpam-apparmor_3.0.4-2ubuntu2.4_i386.deb 2ff7b357d85a0f795cb7804b23b4392261f1b82149b579649e7bfeabbcb94765 94114 python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 74d6c8d599bad6b25f711f20599402d86e82fb5a1be3104766491cbcd60eaf2f 30060 python3-libapparmor_3.0.4-2ubuntu2.4_i386.deb Files: eacd313ccf5543fc88ffcb81bd5040ba 2306528 debug optional apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 3055dd963e8cb351fe2d90667b7d0544 11682 admin optional apparmor_3.0.4-2ubuntu2.4_i386.buildinfo 90e8a2eda445174e639413bfd858cf7a 640408 admin optional apparmor_3.0.4-2ubuntu2.4_i386.deb 3c302db2de5c765a09d91a05b7668976 354676 raw-translations - apparmor_3.0.4-2ubuntu2.4_i386_translations.tar.gz 31fa7da24830ddde22b939a3d9ee1ec6 15454 debug optional libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 8029245c3b81755c659ad2fcad207fcb 15390 httpd optional libapache2-mod-apparmor_3.0.4-2ubuntu2.4_i386.deb b67c675c458ee42677d8018010b78874 82430 libdevel optional libapparmor-dev_3.0.4-2ubuntu2.4_i386.deb 21e3cd34e863a567549497dfcdf143f6 66174 debug optional libapparmor1-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb dc8e84e54b2171d1bcb9464b78d8f39f 41596 libs optional libapparmor1_3.0.4-2ubuntu2.4_i386.deb ff005d9cd01a46631e29bdc962e8f1b5 6916 debug optional libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb e5751892e6dc251c2be28a055a857118 7864 admin optional libpam-apparmor_3.0.4-2ubuntu2.4_i386.deb f6db3676d873146aee781fcbd496579f 94114 debug optional python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_i386.ddeb 6b5c34bc8b37f3d1b311929def03f6c6 30060 python optional python3-libapparmor_3.0.4-2ubuntu2.4_i386.deb Original-Maintainer: Debian AppArmor Team