Format: 1.8 Date: Tue, 06 Mar 2024 15:40:00 -0300 Source: apparmor Binary: apparmor apparmor-easyprof apparmor-notify apparmor-profiles apparmor-utils dh-apparmor libapache2-mod-apparmor libapparmor-dev libapparmor-perl libapparmor1 libpam-apparmor python3-apparmor python3-libapparmor Architecture: amd64 all amd64_translations Version: 2.13.3-7ubuntu5.4 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Rodrigo Figueiredo Zaiden Description: apparmor - user-space parser utility for AppArmor apparmor-easyprof - AppArmor easyprof profiling tool apparmor-notify - AppArmor notification system apparmor-profiles - experimental profiles for AppArmor security policies apparmor-utils - utilities for controlling AppArmor dh-apparmor - AppArmor debhelper routines libapache2-mod-apparmor - changehat AppArmor library as an Apache module libapparmor-dev - AppArmor development libraries and header files libapparmor-perl - AppArmor library Perl bindings libapparmor1 - changehat AppArmor library libpam-apparmor - changehat AppArmor library as a PAM module python3-apparmor - AppArmor Python3 utility library python3-libapparmor - AppArmor library Python3 bindings Launchpad-Bugs-Fixed: 1597017 Changes: apparmor (2.13.3-7ubuntu5.4) focal-security; urgency=medium . * SECURITY UPDATE: Excessive permissions with mount rules (LP: #1597017) - d/p/CVE-2016-1585/parser-Fix-expansion-of-variables-in-unix-rules-addr.patch: add calls to filter_slashes() in parser/af_unix.cc, make it external in parser/parser.h and change it to void in parser/parser_regex.c. - d/p/CVE-2016-1585/parser-enable-variable-expansion-for-mount-type-and-.patch: add variable expansion with expand_entry_variables() in parser/mount.cc. - d/p/CVE-2016-1585/parser-call-filter-slashes-for-mount-conditionals.patch: add calls to filter_slashes() in parser/mount.cc. - d/p/CVE-2016-1585/Support-rule-qualifiers-in-regression-tests.patch: update rule qualifiers in regression tests in tests/regression/apparmor/mkprofile.pl and tests/regression/apparmor/capabilities.sh. - d/p/CVE-2016-1585/Merge-Fix-mount-rules-encoding.patch: fix mount rules encoding in parser/mount.cc, parser/mount.h, parser/parser.h and fix multiple test cases in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-expand-mount-tests.patch: expand mount regression tests in tests/regression/apparmor/Makefile, tests/regression/apparmor/mount.c, tests/regression/apparmor/mount.sh and tests/regression/apparmor/mkprofile.pl. - d/p/CVE-2016-1585/Merge-Issue-312-added-missing-kernel-mount-options.patch: add missing kernel mount options flag in parser/apparmor.d.pod, parser/mount.cc, parser/mount.h, tests/regression/apparmor/mount.sh and parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-extend-test-profiles-for-mount.patch: update test profiles in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-parser-fix-parsing-of-source-as-mount-point-fo.patch: update gen_policy_change_mount_type() in parser/mount.cc and also updated tests on parser/tst/simple_tests/mount/* and tests/regression/apparmor/mount.sh. - d/p/CVE-2016-1585/parser-fix-rule-flag-generation-change_mount-type-ru.patch: add device checks in gen_flag_rules() in parser/mount.cc and tests in parser/tst/simple_tests/mount/*, parser/tst/equality.sh, tests/regression/apparmor/mount.sh and utils/test/test-parser-simple-tests.py. - d/p/CVE-2016-1585/Fix-build-failure-in-df4ed537e-allow-reading-of-etc-.patch: remove the WARN_DEPRECATED flag in pwarn call in parser/mount.cc. - d/p/CVE-2016-1585/parser-Deprecation-warning-should-not-have-been-back.patch: remove deprecation warning message in parser/mount.cc. - CVE-2016-1585 Checksums-Sha1: 63e643f49852dea8dde19be1810d6044a642130e 1758276 apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 20f8b18d38dff4995b1dc3d4f360894e9f4a3287 10360 apparmor-easyprof_2.13.3-7ubuntu5.4_all.deb 9512b1c812060f4c2cea68b8864367323a24947d 12436 apparmor-notify_2.13.3-7ubuntu5.4_all.deb a516e357edf60d8842da4f91951181700a7f0c32 32700 apparmor-profiles_2.13.3-7ubuntu5.4_all.deb 7e52fb35d723177f4dbe70af415af87f3acea556 51060 apparmor-utils_2.13.3-7ubuntu5.4_amd64.deb fc3651f21cae9ee633688e26d17ebddd57a1be4e 13811 apparmor_2.13.3-7ubuntu5.4_amd64.buildinfo e509afe283d89758128532bb03e598733a273b47 504704 apparmor_2.13.3-7ubuntu5.4_amd64.deb 4ef3d7a13bfea764f231cab8967d19b56954e3d0 213117 apparmor_2.13.3-7ubuntu5.4_amd64_translations.tar.gz a298e5ef2a33cc7b8bd3716890f5d81b17c1c7b3 11716 dh-apparmor_2.13.3-7ubuntu5.4_all.deb c5440396893434e496f4c1cfb5c385399d26132e 17640 libapache2-mod-apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 07c501e16143245eb9c492a98bf6751c4d81ca9c 15140 libapache2-mod-apparmor_2.13.3-7ubuntu5.4_amd64.deb 51a4866f996537c3ff9542ce7a33272cd4cb442a 73716 libapparmor-dev_2.13.3-7ubuntu5.4_amd64.deb 8c6add570e607a1a89507a08a5607d69498a9516 147028 libapparmor-perl-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 4a3f5cc1839857f4c9f1ba5cd482131706235a49 33496 libapparmor-perl_2.13.3-7ubuntu5.4_amd64.deb cee45764af6e770109add5c19bb5ea7eaff9de73 70092 libapparmor1-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 353bbcfbe838ecc1882598c255d13f0310ee5652 36044 libapparmor1_2.13.3-7ubuntu5.4_amd64.deb 84c208077db7f16e8ab7016e80a036ba847fea26 7984 libpam-apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb b47c5d5f589dcec2318cf45ed35a1e36bd8e6c90 7400 libpam-apparmor_2.13.3-7ubuntu5.4_amd64.deb d57363f1fcc9a94319eda528b25010046276eb97 79824 python3-apparmor_2.13.3-7ubuntu5.4_amd64.deb f634d52c6431a26344495d1057e070053a407bf1 108076 python3-libapparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb b8e6d857ec70eed186dd6c835412c89fc6bf8031 26884 python3-libapparmor_2.13.3-7ubuntu5.4_amd64.deb Checksums-Sha256: bf66cb213cbbd59770848ec3ad256cdedbfc9b743e3586dfcd1c7fb734f624fd 1758276 apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 805bcc0c4e33efaad5508dcc97b23ff2ff1380fe8a5a2d63974bc3c8abc77497 10360 apparmor-easyprof_2.13.3-7ubuntu5.4_all.deb 59741f6a441dbf53364b6f8a10f319f2bb4225ba8fc270245f510aaad5d9563b 12436 apparmor-notify_2.13.3-7ubuntu5.4_all.deb 8ec707739a2c2cd93fe1d9bd85fddc767fab0dd9790eafc9ba419dac31aca7a0 32700 apparmor-profiles_2.13.3-7ubuntu5.4_all.deb 2b13d05a5aa01df680d636b3b3d57dc8bfda977a9a07e5054204f738731777f3 51060 apparmor-utils_2.13.3-7ubuntu5.4_amd64.deb ce11c122d20a977dde7a39507aa5da9947dda2274a9c7a413e3f72eaee6a34ec 13811 apparmor_2.13.3-7ubuntu5.4_amd64.buildinfo c3e13c1f06bd381bdef7a12213658ba075143663da266ea2fd914039f5815bb6 504704 apparmor_2.13.3-7ubuntu5.4_amd64.deb 8a85b9d94096571cb01a78d79d6ecf8d20dc81abcbc329fd5d9007712f6b3443 213117 apparmor_2.13.3-7ubuntu5.4_amd64_translations.tar.gz 4e133114778fd5ac931157414af01cb60c773c0e1639d28b9e6443af589600f9 11716 dh-apparmor_2.13.3-7ubuntu5.4_all.deb a9c2741d5da7441ce0690efea6c5840a25490a1f35d43e3078011b0eeda5c4d7 17640 libapache2-mod-apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb b8a0002a27e98f5f361d1c7056f925e8f92b9268234944842b6fce446ce62664 15140 libapache2-mod-apparmor_2.13.3-7ubuntu5.4_amd64.deb b53174cdefa1da6d9340882044c7c7fdf0cfb2f15e3f86aca8f99fdd01a5e003 73716 libapparmor-dev_2.13.3-7ubuntu5.4_amd64.deb 073a80feee87f197c594bd063b4e168ac01c68678c1ede10aca9eaea28ae905f 147028 libapparmor-perl-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb cc3e96f9141a7d70c80b07305f4d8ae7cae49ed487ceef3b4732fd12ea1c6869 33496 libapparmor-perl_2.13.3-7ubuntu5.4_amd64.deb 1096c5d93db78ff98804f7e181eb02136098adc2320812aa39f5797ec02f6d45 70092 libapparmor1-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 7d2599a015821e56a019762643618e2c8cbeeb84ef5debcc7b205f658908a147 36044 libapparmor1_2.13.3-7ubuntu5.4_amd64.deb a78533c14a2889aa8d2896a7d94a8d6f06c458561f9d9c2eed11badd3bc4480a 7984 libpam-apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 82d77977c43c93e0631d85bd8ce7069d76248348abef814c76261a32d50f83a0 7400 libpam-apparmor_2.13.3-7ubuntu5.4_amd64.deb c378d44d75de916261fec30112d2e322bff9721f682991ec824759637565e1ee 79824 python3-apparmor_2.13.3-7ubuntu5.4_amd64.deb 1e017411f05ed46cd291e10e3997ec914763f42d450c127acff1e0ca9bd4eae6 108076 python3-libapparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb d8b175a378edb275ae4e20e10ef11a80aefbdff692d6f52de5b8e358466c0e87 26884 python3-libapparmor_2.13.3-7ubuntu5.4_amd64.deb Files: cf3ca171cf0a3750dca143bdaef0f918 1758276 debug optional apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 58df0cf2ed4378590becb2b535c4a650 10360 admin optional apparmor-easyprof_2.13.3-7ubuntu5.4_all.deb 832dfd265767bd292b2e66938f485cd4 12436 admin optional apparmor-notify_2.13.3-7ubuntu5.4_all.deb 8569e05f8914216710f451fb96d22e27 32700 admin optional apparmor-profiles_2.13.3-7ubuntu5.4_all.deb 2c9d59599e82913671a33a9783da9408 51060 admin optional apparmor-utils_2.13.3-7ubuntu5.4_amd64.deb 0add9993ec0dea1e210cb6156eae217b 13811 admin optional apparmor_2.13.3-7ubuntu5.4_amd64.buildinfo 1982004a4f8a43ebcc251f500d9a6aae 504704 admin optional apparmor_2.13.3-7ubuntu5.4_amd64.deb 12eb8802ebfc0fe83dc265d5845428ce 213117 raw-translations - apparmor_2.13.3-7ubuntu5.4_amd64_translations.tar.gz ed5c1b792fadd07b4beddbc5819b2254 11716 devel optional dh-apparmor_2.13.3-7ubuntu5.4_all.deb 060b2b425f30eaaad8cc7881ae80be0b 17640 debug optional libapache2-mod-apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb cd50bdcf51ff9b2021bbc8a404f805b9 15140 httpd optional libapache2-mod-apparmor_2.13.3-7ubuntu5.4_amd64.deb 7e9161fe0067c4d388ede909092b9b5a 73716 libdevel optional libapparmor-dev_2.13.3-7ubuntu5.4_amd64.deb a37980bc710eff108be508f8228fa479 147028 debug optional libapparmor-perl-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 10904a34e29158febc15496b1f6217ee 33496 perl optional libapparmor-perl_2.13.3-7ubuntu5.4_amd64.deb 25c037174404acb2d15a894cf31e2485 70092 debug optional libapparmor1-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb df21d75cad44b8a9e87e04bd20f47f5c 36044 libs optional libapparmor1_2.13.3-7ubuntu5.4_amd64.deb 288b857b7a3f024b022d9906dd41a1d7 7984 debug optional libpam-apparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb 61abee490da2772cd6d816ba0b49ff8a 7400 admin optional libpam-apparmor_2.13.3-7ubuntu5.4_amd64.deb 32df344e04f55a319c4cbc9e19d66338 79824 python optional python3-apparmor_2.13.3-7ubuntu5.4_amd64.deb 88cf7c9a31c1398076cfbbad89805ade 108076 debug optional python3-libapparmor-dbgsym_2.13.3-7ubuntu5.4_amd64.ddeb fde5d85a9d9d75fd254c9a0dc5f04db4 26884 python optional python3-libapparmor_2.13.3-7ubuntu5.4_amd64.deb Original-Maintainer: Debian AppArmor Team