Format: 1.8 Date: Tue, 06 Mar 2024 15:40:00 -0300 Source: apparmor Binary: apparmor apparmor-utils libapache2-mod-apparmor libapparmor-dev libapparmor-perl libapparmor1 libpam-apparmor python3-apparmor python3-libapparmor Architecture: arm64 arm64_translations Version: 2.13.3-7ubuntu5.4 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Rodrigo Figueiredo Zaiden Description: apparmor - user-space parser utility for AppArmor apparmor-utils - utilities for controlling AppArmor libapache2-mod-apparmor - changehat AppArmor library as an Apache module libapparmor-dev - AppArmor development libraries and header files libapparmor-perl - AppArmor library Perl bindings libapparmor1 - changehat AppArmor library libpam-apparmor - changehat AppArmor library as a PAM module python3-apparmor - AppArmor Python3 utility library python3-libapparmor - AppArmor library Python3 bindings Launchpad-Bugs-Fixed: 1597017 Changes: apparmor (2.13.3-7ubuntu5.4) focal-security; urgency=medium . * SECURITY UPDATE: Excessive permissions with mount rules (LP: #1597017) - d/p/CVE-2016-1585/parser-Fix-expansion-of-variables-in-unix-rules-addr.patch: add calls to filter_slashes() in parser/af_unix.cc, make it external in parser/parser.h and change it to void in parser/parser_regex.c. - d/p/CVE-2016-1585/parser-enable-variable-expansion-for-mount-type-and-.patch: add variable expansion with expand_entry_variables() in parser/mount.cc. - d/p/CVE-2016-1585/parser-call-filter-slashes-for-mount-conditionals.patch: add calls to filter_slashes() in parser/mount.cc. - d/p/CVE-2016-1585/Support-rule-qualifiers-in-regression-tests.patch: update rule qualifiers in regression tests in tests/regression/apparmor/mkprofile.pl and tests/regression/apparmor/capabilities.sh. - d/p/CVE-2016-1585/Merge-Fix-mount-rules-encoding.patch: fix mount rules encoding in parser/mount.cc, parser/mount.h, parser/parser.h and fix multiple test cases in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-expand-mount-tests.patch: expand mount regression tests in tests/regression/apparmor/Makefile, tests/regression/apparmor/mount.c, tests/regression/apparmor/mount.sh and tests/regression/apparmor/mkprofile.pl. - d/p/CVE-2016-1585/Merge-Issue-312-added-missing-kernel-mount-options.patch: add missing kernel mount options flag in parser/apparmor.d.pod, parser/mount.cc, parser/mount.h, tests/regression/apparmor/mount.sh and parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-extend-test-profiles-for-mount.patch: update test profiles in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-parser-fix-parsing-of-source-as-mount-point-fo.patch: update gen_policy_change_mount_type() in parser/mount.cc and also updated tests on parser/tst/simple_tests/mount/* and tests/regression/apparmor/mount.sh. - d/p/CVE-2016-1585/parser-fix-rule-flag-generation-change_mount-type-ru.patch: add device checks in gen_flag_rules() in parser/mount.cc and tests in parser/tst/simple_tests/mount/*, parser/tst/equality.sh, tests/regression/apparmor/mount.sh and utils/test/test-parser-simple-tests.py. - d/p/CVE-2016-1585/Fix-build-failure-in-df4ed537e-allow-reading-of-etc-.patch: remove the WARN_DEPRECATED flag in pwarn call in parser/mount.cc. - d/p/CVE-2016-1585/parser-Deprecation-warning-should-not-have-been-back.patch: remove deprecation warning message in parser/mount.cc. - CVE-2016-1585 Checksums-Sha1: 8dceb68c258d234f9761273ca34f739926ae74b5 1785980 apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb dbd4436bdcdc6fc7b8a25fa81645b4d5f1d83d7f 51060 apparmor-utils_2.13.3-7ubuntu5.4_arm64.deb 696fcfdc3aa862b38bd3fc1ae507fe67f67adda2 12623 apparmor_2.13.3-7ubuntu5.4_arm64.buildinfo efac499aeb105ad53c12c1d0985349fb60dce498 464964 apparmor_2.13.3-7ubuntu5.4_arm64.deb 2a93ff04c92466676fe9c67953c52df523202c4a 208506 apparmor_2.13.3-7ubuntu5.4_arm64_translations.tar.gz fcc2522a14709db8029773a89d0e66c898c2679c 17928 libapache2-mod-apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 1b59dbc3ab65676fcb80fe1c6e86e330a7302741 14340 libapache2-mod-apparmor_2.13.3-7ubuntu5.4_arm64.deb b212f665999a52775efbe3c08defdc7eccff7379 73872 libapparmor-dev_2.13.3-7ubuntu5.4_arm64.deb b2e50e877d0399efe63ba6de0918a300725227cd 148284 libapparmor-perl-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb e51a27579819d34ba3beb4f883d0efd9272ea6e7 29760 libapparmor-perl_2.13.3-7ubuntu5.4_arm64.deb 0c85cfc44df95e3da5441a02cad3abd2b330c834 68780 libapparmor1-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 4b9dc1be5e20f7838dfc4133f9e35260af867511 34904 libapparmor1_2.13.3-7ubuntu5.4_arm64.deb 6409fd77313303d1af369c898fd1f40a022d2d0c 8096 libpam-apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 7529a07b36cf6c60dcf6d76fd0288cf1d564fe5c 7404 libpam-apparmor_2.13.3-7ubuntu5.4_arm64.deb 56505edb79d26acd2e9a846f14187a03b3e290c5 79824 python3-apparmor_2.13.3-7ubuntu5.4_arm64.deb 15e5f00e7f8180231e5f3e7c32c604a85ffbd153 106280 python3-libapparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 72a8f1956ad35911bef69c688dcddfc52ba4eea7 25188 python3-libapparmor_2.13.3-7ubuntu5.4_arm64.deb Checksums-Sha256: 9080c6325457bbbd8b958056c1be4100d20ff1b756d3a298762779ae87798079 1785980 apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb eeeb9e7f1c24353931ebab3bec257aa3019096a9c8dd513f0260fb854b28f66f 51060 apparmor-utils_2.13.3-7ubuntu5.4_arm64.deb 771ef153ec23cd59da36d83a1212b79f9916a4dda8e33fdcc39e156f64dd501e 12623 apparmor_2.13.3-7ubuntu5.4_arm64.buildinfo 137046e1a8e552e74d7cdd0b8bf2717917c328957a55b83a95c5c82666330540 464964 apparmor_2.13.3-7ubuntu5.4_arm64.deb ed3fa010e74ec4f2bd38122745bfba69661bd75c1178a0a81930c9f0c4838503 208506 apparmor_2.13.3-7ubuntu5.4_arm64_translations.tar.gz 34a3ee2c2e0451a7d53671d3710f64059d3a542aa009d7257c3a602ea45bb2a6 17928 libapache2-mod-apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 6ef0e222eeca83945f1909697416b58bf1112147516531c0879c4d1b59b7ade4 14340 libapache2-mod-apparmor_2.13.3-7ubuntu5.4_arm64.deb 39936a5dc1a4c18bd1cd4188c246e2b9cd61be34ef1f9af7ae01799384a84e13 73872 libapparmor-dev_2.13.3-7ubuntu5.4_arm64.deb 6205147541986151bc727417d78e421f3bc2bb8f1c3b3f92709477c2d90db8c3 148284 libapparmor-perl-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb b66cc3e7f7a203dfa6adbd08ca7bbc6bf3eb3b27f983402cd0d6ae1d89401364 29760 libapparmor-perl_2.13.3-7ubuntu5.4_arm64.deb 5afecdea4b84aa4c1db19f68cf72a6351b4f6b610663d75c3b9bfd8e9676ebd1 68780 libapparmor1-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb cb65c0208e3c6f94f45beeeb2135bd68d789098b33a627ff634d4004ba7ac45c 34904 libapparmor1_2.13.3-7ubuntu5.4_arm64.deb 39302ece62b301f8aeb47268e5307e273f17454325dc49a7524e26a4afb413c9 8096 libpam-apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 74b8a357469da31eb612544466e4bd55106eb29341aa2de0e7a1d4c154192a1d 7404 libpam-apparmor_2.13.3-7ubuntu5.4_arm64.deb d37f8eec2cb74b5c8ed3a096412f4ae5e94707ae2b3ccb3cad22e04969d2ac45 79824 python3-apparmor_2.13.3-7ubuntu5.4_arm64.deb 4f7e6a453004bb326e31c570f078b0eac5fd24af0c35d898be1b1cc83be15799 106280 python3-libapparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 1acb549095cfa9e713a5dc5f6234a9b15c10fd71229227ab287b13122c71eb4f 25188 python3-libapparmor_2.13.3-7ubuntu5.4_arm64.deb Files: 51befe15d1b6e312410562f8e0303ea3 1785980 debug optional apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 02829e1c40a899e0f1e9fc6b0f9c28cc 51060 admin optional apparmor-utils_2.13.3-7ubuntu5.4_arm64.deb 8e47d05f2c45e046d0ac9544d03327b4 12623 admin optional apparmor_2.13.3-7ubuntu5.4_arm64.buildinfo 8165e4f8a3739ec4ad10812a1b212c34 464964 admin optional apparmor_2.13.3-7ubuntu5.4_arm64.deb 367e892fe317955a78227bfbca16165b 208506 raw-translations - apparmor_2.13.3-7ubuntu5.4_arm64_translations.tar.gz c85b40b47f91c5cfd70b80ab12a5b8df 17928 debug optional libapache2-mod-apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 2646ef55d3cda56af47f0ab30851ccd5 14340 httpd optional libapache2-mod-apparmor_2.13.3-7ubuntu5.4_arm64.deb 68ee8f8cfb6a3bc7d11a97cb09db51e3 73872 libdevel optional libapparmor-dev_2.13.3-7ubuntu5.4_arm64.deb 9030b2d03c541c0a21bb614e89c4845a 148284 debug optional libapparmor-perl-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 0672a230549956829592e8913a77d30c 29760 perl optional libapparmor-perl_2.13.3-7ubuntu5.4_arm64.deb 6d92ada2abcd6dc7af69f0f855dab7a5 68780 debug optional libapparmor1-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb b909510d76467f161d24ccb11abf3fc5 34904 libs optional libapparmor1_2.13.3-7ubuntu5.4_arm64.deb 40b1209e6c24a4262054210c68be376d 8096 debug optional libpam-apparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 99be1e71e9864c60967072e577c9ea77 7404 admin optional libpam-apparmor_2.13.3-7ubuntu5.4_arm64.deb df9d91e277a8b7d235a5cd2ab77ab24f 79824 python optional python3-apparmor_2.13.3-7ubuntu5.4_arm64.deb 913a03a118b02e582855e8e0f98b7386 106280 debug optional python3-libapparmor-dbgsym_2.13.3-7ubuntu5.4_arm64.ddeb 02b47d089138427614387bf0269ae090 25188 python optional python3-libapparmor_2.13.3-7ubuntu5.4_arm64.deb Original-Maintainer: Debian AppArmor Team