PT-2018-19245 · Canonical+3 · Apparmor

Published 2018-10-04 · Updated 2018-10-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description This issue involves adjusting the private-files abstraction to disallow writing to thumbnailer configuration files. Additionally, the private-files, private-files-strict, and user-files abstractions are adjusted to disallow writes on parent directories of sensitive files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

USN-3784-1

Affected Products

Apparmor

References · 4

• https://ubuntu.com/security/notices/USN-3784-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3784-1 · Vendor Advisory
• https://launchpad.net/bugs/1788929 · Note
• https://launchpad.net/bugs/1794848 · Note