Publishing details

• Published on 2022-04-27
• Copied from ubuntu focal in PPA for Ubuntu Security Proposed by David Fernandez Gonzalez

Changelog

libsepol (3.0-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: use-after-free in __cil_verify_classperms
    - debian/patches/CVE-2021-36084.patch: alter destruction of
      classperms list when resetting classpermission by avoiding
      deleting the inner data in cil/src/cil_reset_ast.c
    - CVE-2021-36084
  * SECURITY UPDATE: use-after-free in __cil_verify_classperms
    - debian/patches/CVE-2021-36085.patch: alter destruction of
      classperms when resetting a perm by avoiding
      deleting the inner data in cil/src/cil_reset_ast.c
    - CVE-2021-36085
  * SECURITY UPDATE: use-after-free in cil_reset_classpermission
    - debian/patches/CVE-2021-36086.patch: prevent
      cil_reset_classperms_set from resetting classpermission by
      setting it to NULL in cil/src/cil_reset_ast.c
    - CVE-2021-36086
  * SECURITY UPDATE: heap-based buffer over-read in ebitmap_match_any
    - debian/patches/CVE-2021-36087.patch: check if a tunable
      declaration, in-statement, block, blockabstract, or macro definition
      is found within an optional in cil/src/cil_build_ast.c and
      cil/src/cil_resolve_ast.c
    - CVE-2021-36087

 -- David Fernandez Gonzalez <email address hidden>  Tue, 26 Apr 2022 11:21:29 +0200

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• riscv64
• s390x

Built packages

• libsepol1 SELinux library for manipulating binary security policies

• libsepol1-dbgsym debug symbols for libsepol1

• libsepol1-dev SELinux binary policy manipulation library and development files

• sepol-utils Security Enhanced Linux policy utility programs

• sepol-utils-dbgsym debug symbols for sepol-utils

Package files

• libsepol1-dbgsym_3.0-1ubuntu0.1_amd64.ddeb (889.7 KiB)
• libsepol1-dbgsym_3.0-1ubuntu0.1_arm64.ddeb (872.9 KiB)
• libsepol1-dbgsym_3.0-1ubuntu0.1_armhf.ddeb (869.7 KiB)
• libsepol1-dbgsym_3.0-1ubuntu0.1_i386.ddeb (754.5 KiB)
• libsepol1-dbgsym_3.0-1ubuntu0.1_ppc64el.ddeb (994.1 KiB)
• libsepol1-dbgsym_3.0-1ubuntu0.1_riscv64.ddeb (841.4 KiB)
• libsepol1-dbgsym_3.0-1ubuntu0.1_s390x.ddeb (940.4 KiB)
• libsepol1-dev_3.0-1ubuntu0.1_amd64.deb (317.5 KiB)
• libsepol1-dev_3.0-1ubuntu0.1_arm64.deb (308.7 KiB)
• libsepol1-dev_3.0-1ubuntu0.1_armhf.deb (294.3 KiB)
• libsepol1-dev_3.0-1ubuntu0.1_i386.deb (353.2 KiB)
• libsepol1-dev_3.0-1ubuntu0.1_ppc64el.deb (363.2 KiB)
• libsepol1-dev_3.0-1ubuntu0.1_riscv64.deb (714.1 KiB)
• libsepol1-dev_3.0-1ubuntu0.1_s390x.deb (292.2 KiB)
• libsepol1_3.0-1ubuntu0.1_amd64.deb (245.8 KiB)
• libsepol1_3.0-1ubuntu0.1_arm64.deb (225.3 KiB)
• libsepol1_3.0-1ubuntu0.1_armhf.deb (215.1 KiB)
• libsepol1_3.0-1ubuntu0.1_i386.deb (270.8 KiB)
• libsepol1_3.0-1ubuntu0.1_ppc64el.deb (276.9 KiB)
• libsepol1_3.0-1ubuntu0.1_riscv64.deb (213.6 KiB)
• libsepol1_3.0-1ubuntu0.1_s390x.deb (218.3 KiB)
• libsepol_3.0-1ubuntu0.1.debian.tar.xz (16.6 KiB)
• libsepol_3.0-1ubuntu0.1.dsc (2.0 KiB)
• libsepol_3.0.orig.tar.gz (462.8 KiB)
• sepol-utils-dbgsym_3.0-1ubuntu0.1_amd64.ddeb (5.0 KiB)
• sepol-utils-dbgsym_3.0-1ubuntu0.1_arm64.ddeb (5.1 KiB)
• sepol-utils-dbgsym_3.0-1ubuntu0.1_armhf.ddeb (5.2 KiB)
• sepol-utils-dbgsym_3.0-1ubuntu0.1_i386.ddeb (4.8 KiB)
• sepol-utils-dbgsym_3.0-1ubuntu0.1_ppc64el.ddeb (5.1 KiB)
• sepol-utils-dbgsym_3.0-1ubuntu0.1_riscv64.ddeb (5.0 KiB)
• sepol-utils-dbgsym_3.0-1ubuntu0.1_s390x.ddeb (4.9 KiB)
• sepol-utils_3.0-1ubuntu0.1_amd64.deb (7.8 KiB)
• sepol-utils_3.0-1ubuntu0.1_arm64.deb (7.7 KiB)
• sepol-utils_3.0-1ubuntu0.1_armhf.deb (7.4 KiB)
• sepol-utils_3.0-1ubuntu0.1_i386.deb (7.9 KiB)
• sepol-utils_3.0-1ubuntu0.1_ppc64el.deb (7.9 KiB)
• sepol-utils_3.0-1ubuntu0.1_riscv64.deb (7.4 KiB)
• sepol-utils_3.0-1ubuntu0.1_s390x.deb (7.6 KiB)