PT-2018-19245 · Canonical+3 · Apparmor

Publicado 2018-10-04 · Atualizado 2018-10-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description This issue involves adjusting the private-files abstraction to disallow writing to thumbnailer configuration files. Additionally, the private-files, private-files-strict, and user-files abstractions are adjusted to disallow writes on parent directories of sensitive files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

USN-3784-1

Produtos afetados

Apparmor

Referências · 4

• https://launchpad.net/bugs/1788929 · Nota
• https://ubuntu.com/security/notices/USN-3784-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3784-1 · Aviso do Fabricante
• https://launchpad.net/bugs/1794848 · Nota