apparmor 2.11.0-3 source package in Debian

Changelog

apparmor (2.11.0-3) unstable; urgency=medium

  * Fix CVE-2017-6507: don't unload unknown profiles during package
    configuration or when restarting the apparmor init script, upstart job, or
    systemd unit as this could leave processes unconfined (Closes: #858768).
    Changes cherry-picked from Ubuntu's 2.11.0-2ubuntu3:
    - debian/apparmor.postinst, debian/apparmor.init, debian/apparmor.upstart:
      Remove calls to unload_obsolete_profiles()
    - debian/patches/utils-add-aa-remove-unknown.patch,
      debian/apparmor.install debian/apparmor.manpages: Include a new utility,
      aa-remove-unknown, which can be used to unload unknown profiles. Based
      on an upstream patch but adjusted to source the /lib/apparmor/functions
      shipped in Debian/Ubuntu.

 -- intrigeri <email address hidden>  Tue, 28 Mar 2017 10:29:15 +0000

Upload details

Uploaded by:
Debian AppArmor Team on 2017-03-28
Uploaded to:
Sid
Original maintainer:
Debian AppArmor Team
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Stretch release on 2017-03-31 main admin

Builds

Downloads

File Size SHA-256 Checksum
apparmor_2.11.0-3.dsc 3.0 KiB 9214a631718111bf2a15830bde3ce709ed0f2de4a0d8779a5be47f40bdaa6464
apparmor_2.11.0.orig.tar.gz 4.8 MiB b1c489ea11e7771b8e6b181532cafbf9ebe6603e3cb00e2558f21b7a5bdd739a
apparmor_2.11.0-3.debian.tar.xz 80.2 KiB 25857dcef3e0866de64545c12b4ed328ed75d7b98462603bcf766b13882a8c66

No changes file available.

Binary packages built by this source