[ubuntu/zesty-proposed] apparmor 2.11.0-2ubuntu3 (Accepted)

[Tyler Hicks]

apparmor (2.11.0-2ubuntu3) zesty; urgency=medium

  * SECURITY UPDATE: Don't unload unknown profiles during package
    configuration or when restarting the apparmor init script, upstart job, or
    systemd unit as this could leave processes unconfined (LP: #1668892)
    - debian/apparmor.postinst, debian/apparmor.init, debian/apparmor.upstart:
      Remove calls to unload_obsolete_profiles()
    - debian/patches/utils-add-aa-remove-unknown.patch,
      debian/apparmor.install debian/apparmor.manpages: Include a new utility,
      aa-remove-unknown, which can be used to unload unknown profiles. Based
      on an upstream patch but adjusted to source the /lib/apparmor/functions
      shipped in Debian/Ubuntu.
    - CVE-2017-6507
  * debian/patches/r3645-profiles-update-nvidia-abstraction.patch: Update
    nvidia abstraction for newer nvidia drivers (LP: #1590561)

Date: Fri, 24 Mar 2017 05:26:28 +0000
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/apparmor/2.11.0-2ubuntu3
-------------- next part --------------
Format: 1.8
Date: Fri, 24 Mar 2017 05:26:28 +0000
Source: apparmor
Binary: apparmor apparmor-utils apparmor-profiles libapparmor-dev libapparmor1 libapparmor-perl libapache2-mod-apparmor libpam-apparmor apparmor-notify python-libapparmor python3-libapparmor python-apparmor python3-apparmor dh-apparmor apparmor-easyprof
Architecture: source
Version: 2.11.0-2ubuntu3
Distribution: zesty
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Tyler Hicks <tyhicks at canonical.com>
Description:
 apparmor   - user-space parser utility for AppArmor
 apparmor-easyprof - AppArmor easyprof profiling tool
 apparmor-notify - AppArmor notification system
 apparmor-profiles - profiles for AppArmor Security policies
 apparmor-utils - utilities for controlling AppArmor
 dh-apparmor - AppArmor debhelper routines
 libapache2-mod-apparmor - changehat AppArmor library as an Apache module
 libapparmor-dev - AppArmor development libraries and header files
 libapparmor-perl - AppArmor library Perl bindings
 libapparmor1 - changehat AppArmor library
 libpam-apparmor - changehat AppArmor library as a PAM module
 python-apparmor - AppArmor Python utility library
 python-libapparmor - AppArmor library Python bindings
 python3-apparmor - AppArmor Python3 utility library
 python3-libapparmor - AppArmor library Python3 bindings
Launchpad-Bugs-Fixed: 1590561 1668892
Changes:
 apparmor (2.11.0-2ubuntu3) zesty; urgency=medium
 .
   * SECURITY UPDATE: Don't unload unknown profiles during package
     configuration or when restarting the apparmor init script, upstart job, or
     systemd unit as this could leave processes unconfined (LP: #1668892)
     - debian/apparmor.postinst, debian/apparmor.init, debian/apparmor.upstart:
       Remove calls to unload_obsolete_profiles()
     - debian/patches/utils-add-aa-remove-unknown.patch,
       debian/apparmor.install debian/apparmor.manpages: Include a new utility,
       aa-remove-unknown, which can be used to unload unknown profiles. Based
       on an upstream patch but adjusted to source the /lib/apparmor/functions
       shipped in Debian/Ubuntu.
     - CVE-2017-6507
   * debian/patches/r3645-profiles-update-nvidia-abstraction.patch: Update
     nvidia abstraction for newer nvidia drivers (LP: #1590561)
Checksums-Sha1:
 586cbc1c35287011e04778ebb0c78467e8a17872 3191 apparmor_2.11.0-2ubuntu3.dsc
 b9e771112771ea251f336b76d525a41ce28c2e00 85440 apparmor_2.11.0-2ubuntu3.debian.tar.xz
Checksums-Sha256:
 ebe57b4f7785d77692e7cbe79e0bafbbca2aa1b8a06b520ff10789ffe533b9ac 3191 apparmor_2.11.0-2ubuntu3.dsc
 d36fe97ad2c99896311128b2ea76fba720b3103dc605b3e64f564d9ccd891cf1 85440 apparmor_2.11.0-2ubuntu3.debian.tar.xz
Files:
 e0fe5249f4987b25048e737d85363795 3191 admin extra apparmor_2.11.0-2ubuntu3.dsc
 cebd2d2ff1e490c3eb96c1c5591560ff 85440 admin extra apparmor_2.11.0-2ubuntu3.debian.tar.xz
Original-Maintainer: Debian AppArmor Team <pkg-apparmor-team at lists.alioth.debian.org>