Format: 1.8 Date: Tue, 06 Mar 2024 15:35:00 -0300 Source: apparmor Binary: apparmor libapache2-mod-apparmor libapparmor-dev libapparmor1 libpam-apparmor python3-libapparmor Built-For-Profiles: noudeb Architecture: s390x s390x_translations Version: 3.0.4-2ubuntu2.4 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Rodrigo Figueiredo Zaiden Description: apparmor - user-space parser utility for AppArmor libapache2-mod-apparmor - changehat AppArmor library as an Apache module libapparmor-dev - AppArmor development libraries and header files libapparmor1 - changehat AppArmor library libpam-apparmor - changehat AppArmor library as a PAM module python3-libapparmor - AppArmor library Python3 bindings Launchpad-Bugs-Fixed: 1597017 Changes: apparmor (3.0.4-2ubuntu2.4) jammy-security; urgency=medium . * SECURITY UPDATE: Excessive permissions with mount rules (LP: #1597017) - d/p/CVE-2016-1585/Merge-Fix-mount-rules-encoding.patch: fix mount rules encoding in parser/mount.cc, parser/mount.h, parser/parser.h and fix multiple test cases in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Support-rule-qualifiers-in-regression-tests.patch: update rule qualifiers in regression tests in tests/regression/apparmor/mkprofile.pl and tests/regression/apparmor/capabilities.sh. - d/p/CVE-2016-1585/Merge-expand-mount-tests.patch: expand mount regression tests in tests/regression/apparmor/mount.c, tests/regression/apparmor/mount.sh and tests/regression/apparmor/mkprofile.pl. - d/p/CVE-2016-1585/Check-for-newer-mount-options-in-regression-test.patch: add check for newer mount options in regression tests in tests/regression/apparmor/Makefile, tests/regression/apparmor/mount.c and tests/regression/apparmor/mount.sh. - d/p/CVE-2016-1585/Merge-Issue-312-added-missing-kernel-mount-options.patch: add missing kernel mount options flag in parser/apparmor.d.pod, parser/mount.cc, parser/mount.h, tests/regression/apparmor/mount.sh and parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-extend-test-profiles-for-mount.patch: update test profiles in parser/tst/simple_tests/mount/*. - d/p/CVE-2016-1585/Merge-parser-fix-parsing-of-source-as-mount-point-fo.patch: update gen_policy_change_mount_type() in parser/mount.cc and also updated tests on parser/tst/simple_tests/mount/* and tests/regression/apparmor/mount.sh. - d/p/CVE-2016-1585/parser-Deprecation-warning-should-not-have-been-back.patch: remove deprecation warning message in parser/mount.cc. - d/p/CVE-2016-1585/parser-fix-rule-flag-generation-change_mount-type-ru.patch: add device checks in gen_flag_rules() in parser/mount.cc and tests in parser/tst/simple_tests/mount/*, parser/tst/equality.sh, tests/regression/apparmor/mount.sh and utils/test/test-parser-simple-tests.py. - CVE-2016-1585 Checksums-Sha1: 204d4f9d716e5259293d4bd37f772969d2488150 2331870 apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb 1bda2ac4298befb27394ccd38205c4c148a779c7 11683 apparmor_3.0.4-2ubuntu2.4_s390x.buildinfo 5185d0cccd5940c1be79cd1310fcadab9814f7ed 609648 apparmor_3.0.4-2ubuntu2.4_s390x.deb 42dccdd5035016512ae907c38cc84e71086649d5 354492 apparmor_3.0.4-2ubuntu2.4_s390x_translations.tar.gz d808496b6dc21ad5ad505c5508651787fa967e0d 17306 libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb 217b5200380e1dfd9be53be571cc27a30c26cde3 14966 libapache2-mod-apparmor_3.0.4-2ubuntu2.4_s390x.deb e9e209cf39b7c3ae3bcc7f9c72740633571c22b2 78840 libapparmor-dev_3.0.4-2ubuntu2.4_s390x.deb 3aad38c43974e6912c6d75fcfea203311e790372 72184 libapparmor1-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb a2c77999bb394aeb2f0e21850221b0b39ec88837 39164 libapparmor1_3.0.4-2ubuntu2.4_s390x.deb 942c9526f0015ec9d49893eae2a334beb1bb53a2 7316 libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb aed2bd925491606d8417a378faf64a314da41043 7426 libpam-apparmor_3.0.4-2ubuntu2.4_s390x.deb e874d293c2af2f17c904ce1b7532f04ec295d3d8 103030 python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb af9f738b132028fab5979820b022e3ee0069786a 28704 python3-libapparmor_3.0.4-2ubuntu2.4_s390x.deb Checksums-Sha256: c70b0b496825c731d535b21d701b360354463c51233577d5bd1614a0e0d32583 2331870 apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb 078d0cb417ea2c71e47ff504a8c4fafe287e12130dec3b2c0a9090ec889d1554 11683 apparmor_3.0.4-2ubuntu2.4_s390x.buildinfo b2332c7649cb8c11d4b4a5c7b25e4b21488a338dbd52775db6567e1ee9cf6119 609648 apparmor_3.0.4-2ubuntu2.4_s390x.deb d3456b3695dbdfef9f38b84412810e05dd17c9ee27b6ff0a97100cee7206fbaa 354492 apparmor_3.0.4-2ubuntu2.4_s390x_translations.tar.gz a67990eb156c2e7fb7601da0e0eec9ac8d5b864c1827c56d5500262e415b4f7f 17306 libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb bcbfba239ed51b6d8eabc3f700e3ab08dded028f0bc697f41d9809fab31d16ad 14966 libapache2-mod-apparmor_3.0.4-2ubuntu2.4_s390x.deb 7c74a4ee676cff944e161f5c8580c7e1d3135eed2b24d60e366be0e808ffc5e4 78840 libapparmor-dev_3.0.4-2ubuntu2.4_s390x.deb 8be2101e56b3a643f8d535ffe4d2b774ba237ec5080576452bf3917247079ee2 72184 libapparmor1-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb 28ceee260b2dcd1b79a4a8310b77b1944cac157ae5fb7d929db5727e3eea3d56 39164 libapparmor1_3.0.4-2ubuntu2.4_s390x.deb ec936c4ba11b976f7c050378b8e83df2e9d25ea708ba0351ecf534a5b3b067be 7316 libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb 23a91ff356296e495c96882fc75468e150ed66a6f890cc034498960cf074f116 7426 libpam-apparmor_3.0.4-2ubuntu2.4_s390x.deb dc8af5f7e95468d627f7e83de60a305f3d15c6c319f124367dbe5a0f960f3d8d 103030 python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb ca7bbc2d87b190aaf7fb6c83246415c4fd6d1224eccc39632d24adbc03800b57 28704 python3-libapparmor_3.0.4-2ubuntu2.4_s390x.deb Files: 13890702311979e1abbd786edc8db010 2331870 debug optional apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb 834420f4fc04115d3f0f70942a861784 11683 admin optional apparmor_3.0.4-2ubuntu2.4_s390x.buildinfo 91b0dc65933ec1d3a4ba16e96cccda69 609648 admin optional apparmor_3.0.4-2ubuntu2.4_s390x.deb 3a3d378e55b7d78192b5a011719b4ef9 354492 raw-translations - apparmor_3.0.4-2ubuntu2.4_s390x_translations.tar.gz 81790aa2e242859d047955ff5a7b76b2 17306 debug optional libapache2-mod-apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb 2b964fa7a54c3d7956e49683b0a9ca48 14966 httpd optional libapache2-mod-apparmor_3.0.4-2ubuntu2.4_s390x.deb 8a57514509131506eda811c7cab2bf88 78840 libdevel optional libapparmor-dev_3.0.4-2ubuntu2.4_s390x.deb 2f637e3b6712af4eab1f0980eaa3d83a 72184 debug optional libapparmor1-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb 0173e0d5bdfe163f68c62bffa932794c 39164 libs optional libapparmor1_3.0.4-2ubuntu2.4_s390x.deb 6fc422846370229516dbb34bdf66500f 7316 debug optional libpam-apparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb ebe8294f7bacb05226d38b9a48f4fe78 7426 admin optional libpam-apparmor_3.0.4-2ubuntu2.4_s390x.deb 8d0770d14e28fc86d096e162c62d21d2 103030 debug optional python3-libapparmor-dbgsym_3.0.4-2ubuntu2.4_s390x.ddeb ec75692b68bc9bcb70badbb48b7bae4b 28704 python optional python3-libapparmor_3.0.4-2ubuntu2.4_s390x.deb Original-Maintainer: Debian AppArmor Team