Security update for apparmor
Announcement ID: | SUSE-SU-2017:1151-1 |
---|---|
Rating: | moderate |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves one vulnerability and has four security fixes can now be installed.
Description:
This update for apparmor provides the following fixes:
This security issue was fixed:
- CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service (bsc#1029696)
These non-security issues were fixed:
- Add tunables/kernelvars abstraction. (bsc#1031529)
- Update flags of ntpd profile. (bsc#1022610)
- Force AppArmor to start after /var/lib mounts. (bsc#1016259)
- Update mlmmj profiles. (bsc#1000201)
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
Magnum Orchestration 7
zypper in -t patch SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2017-669=1
-
SUSE Linux Enterprise Desktop 12 SP1
zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2017-669=1
-
SUSE Linux Enterprise Desktop 12 SP2
zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-669=1
-
SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2
zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-669=1
-
SUSE Linux Enterprise Software Development Kit 12 SP1
zypper in -t patch SUSE-SLE-SDK-12-SP1-2017-669=1
-
SUSE Linux Enterprise Software Development Kit 12 12-SP2
zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-669=1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP1
zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-669=1
-
SUSE Linux Enterprise Server 12 SP1
zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-669=1
-
SUSE Linux Enterprise High Performance Computing 12 SP2
zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-669=1
-
SUSE Linux Enterprise Server 12 SP2
zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-669=1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP2
zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-669=1
Package List:
-
Magnum Orchestration 7 (x86_64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
-
SUSE Linux Enterprise Desktop 12 SP1 (x86_64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- perl-apparmor-debuginfo-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- pam_apparmor-32bit-2.8.2-54.1
- libapparmor1-debuginfo-32bit-2.8.2-54.1
- pam_apparmor-debuginfo-32bit-2.8.2-54.1
- perl-apparmor-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
- pam_apparmor-debuginfo-2.8.2-54.1
- libapparmor1-32bit-2.8.2-54.1
- pam_apparmor-2.8.2-54.1
-
SUSE Linux Enterprise Desktop 12 SP1 (noarch)
- apparmor-docs-2.8.2-54.1
- apparmor-utils-2.8.2-54.1
- apparmor-profiles-2.8.2-54.1
-
SUSE Linux Enterprise Desktop 12 SP2 (x86_64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- perl-apparmor-debuginfo-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- pam_apparmor-32bit-2.8.2-54.1
- libapparmor1-debuginfo-32bit-2.8.2-54.1
- pam_apparmor-debuginfo-32bit-2.8.2-54.1
- perl-apparmor-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
- pam_apparmor-debuginfo-2.8.2-54.1
- libapparmor1-32bit-2.8.2-54.1
- pam_apparmor-2.8.2-54.1
-
SUSE Linux Enterprise Desktop 12 SP2 (noarch)
- apparmor-docs-2.8.2-54.1
- apparmor-utils-2.8.2-54.1
- apparmor-profiles-2.8.2-54.1
-
SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2 (aarch64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- perl-apparmor-debuginfo-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- apache2-mod_apparmor-2.8.2-54.1
- perl-apparmor-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
- apache2-mod_apparmor-debuginfo-2.8.2-54.1
- pam_apparmor-2.8.2-54.1
-
SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2 (noarch)
- apparmor-docs-2.8.2-54.1
- apparmor-utils-2.8.2-54.1
- apparmor-profiles-2.8.2-54.1
-
SUSE Linux Enterprise Software Development Kit 12 SP1 (ppc64le s390x x86_64)
- apparmor-debugsource-2.8.2-54.1
- libapparmor-devel-2.8.2-54.1
-
SUSE Linux Enterprise Software Development Kit 12 12-SP2 (aarch64 ppc64le s390x x86_64)
- apparmor-debugsource-2.8.2-54.1
- libapparmor-devel-2.8.2-54.1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP1 (ppc64le x86_64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- perl-apparmor-debuginfo-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- apache2-mod_apparmor-2.8.2-54.1
- perl-apparmor-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
- pam_apparmor-debuginfo-2.8.2-54.1
- apache2-mod_apparmor-debuginfo-2.8.2-54.1
- pam_apparmor-2.8.2-54.1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP1 (noarch)
- apparmor-docs-2.8.2-54.1
- apparmor-utils-2.8.2-54.1
- apparmor-profiles-2.8.2-54.1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP1 (x86_64)
- libapparmor1-32bit-2.8.2-54.1
- pam_apparmor-debuginfo-32bit-2.8.2-54.1
- pam_apparmor-32bit-2.8.2-54.1
- libapparmor1-debuginfo-32bit-2.8.2-54.1
-
SUSE Linux Enterprise Server 12 SP1 (ppc64le s390x x86_64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- perl-apparmor-debuginfo-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- apache2-mod_apparmor-2.8.2-54.1
- perl-apparmor-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
- pam_apparmor-debuginfo-2.8.2-54.1
- apache2-mod_apparmor-debuginfo-2.8.2-54.1
- pam_apparmor-2.8.2-54.1
-
SUSE Linux Enterprise Server 12 SP1 (noarch)
- apparmor-docs-2.8.2-54.1
- apparmor-utils-2.8.2-54.1
- apparmor-profiles-2.8.2-54.1
-
SUSE Linux Enterprise Server 12 SP1 (s390x x86_64)
- libapparmor1-32bit-2.8.2-54.1
- pam_apparmor-debuginfo-32bit-2.8.2-54.1
- pam_apparmor-32bit-2.8.2-54.1
- libapparmor1-debuginfo-32bit-2.8.2-54.1
-
SUSE Linux Enterprise High Performance Computing 12 SP2 (aarch64 x86_64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- perl-apparmor-debuginfo-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- apache2-mod_apparmor-2.8.2-54.1
- perl-apparmor-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
- apache2-mod_apparmor-debuginfo-2.8.2-54.1
- pam_apparmor-2.8.2-54.1
-
SUSE Linux Enterprise High Performance Computing 12 SP2 (noarch)
- apparmor-docs-2.8.2-54.1
- apparmor-utils-2.8.2-54.1
- apparmor-profiles-2.8.2-54.1
-
SUSE Linux Enterprise High Performance Computing 12 SP2 (x86_64)
- pam_apparmor-debuginfo-32bit-2.8.2-54.1
- pam_apparmor-32bit-2.8.2-54.1
- libapparmor1-debuginfo-32bit-2.8.2-54.1
- pam_apparmor-debuginfo-2.8.2-54.1
- libapparmor1-32bit-2.8.2-54.1
-
SUSE Linux Enterprise Server 12 SP2 (aarch64 ppc64le s390x x86_64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- perl-apparmor-debuginfo-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- apache2-mod_apparmor-2.8.2-54.1
- perl-apparmor-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
- apache2-mod_apparmor-debuginfo-2.8.2-54.1
- pam_apparmor-2.8.2-54.1
-
SUSE Linux Enterprise Server 12 SP2 (noarch)
- apparmor-docs-2.8.2-54.1
- apparmor-utils-2.8.2-54.1
- apparmor-profiles-2.8.2-54.1
-
SUSE Linux Enterprise Server 12 SP2 (ppc64le s390x x86_64)
- pam_apparmor-debuginfo-2.8.2-54.1
-
SUSE Linux Enterprise Server 12 SP2 (s390x x86_64)
- libapparmor1-32bit-2.8.2-54.1
- pam_apparmor-debuginfo-32bit-2.8.2-54.1
- pam_apparmor-32bit-2.8.2-54.1
- libapparmor1-debuginfo-32bit-2.8.2-54.1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP2 (ppc64le x86_64)
- apparmor-parser-debuginfo-2.8.2-54.1
- apparmor-parser-2.8.2-54.1
- perl-apparmor-debuginfo-2.8.2-54.1
- apparmor-debugsource-2.8.2-54.1
- apache2-mod_apparmor-2.8.2-54.1
- perl-apparmor-2.8.2-54.1
- libapparmor1-debuginfo-2.8.2-54.1
- libapparmor1-2.8.2-54.1
- pam_apparmor-debuginfo-2.8.2-54.1
- apache2-mod_apparmor-debuginfo-2.8.2-54.1
- pam_apparmor-2.8.2-54.1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP2 (noarch)
- apparmor-docs-2.8.2-54.1
- apparmor-utils-2.8.2-54.1
- apparmor-profiles-2.8.2-54.1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP2 (x86_64)
- libapparmor1-32bit-2.8.2-54.1
- pam_apparmor-debuginfo-32bit-2.8.2-54.1
- pam_apparmor-32bit-2.8.2-54.1
- libapparmor1-debuginfo-32bit-2.8.2-54.1
References:
- https://www.suse.com/security/cve/CVE-2017-6507.html
- https://bugzilla.suse.com/show_bug.cgi?id=1000201
- https://bugzilla.suse.com/show_bug.cgi?id=1016259
- https://bugzilla.suse.com/show_bug.cgi?id=1022610
- https://bugzilla.suse.com/show_bug.cgi?id=1029696
- https://bugzilla.suse.com/show_bug.cgi?id=1031529