USN-3784-1
AppArmor update
As a security improvement, this update adjusts the private-files abstraction to disallow writing to thumbnailer configuration files. Additionally adjust the private-files, private-files-strict and user-files abstractions to disallow writes on parent directories of sensitive files.
What each source reports
OSV No score
AppArmor update
As a security improvement, this update adjusts the private-files abstraction to disallow writing to thumbnailer configuration files. Additionally adjust the private-files, private-files-strict and user-files abstractions to disallow writes on parent directories of sensitive files.
- Record
USN-3784-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apparmorUbuntu:14.04:LTS |
before 2.10.95-0ubuntu2.6~14.04.4, plus listed versions 2.8.0-0ubuntu312.8.0-0ubuntu322.8.0-0ubuntu332.8.0-0ubuntu342.8.0-0ubuntu35 Show 12 moreShow less2.8.0-0ubuntu372.8.0-0ubuntu382.8.95~2430-0ubuntu12.8.95~2430-0ubuntu22.8.95~2430-0ubuntu32.8.95~2430-0ubuntu52.8.95~2430-0ubuntu5.12.8.95~2430-0ubuntu5.22.8.95~2430-0ubuntu5.32.10.95-0ubuntu2.5~14.04.12.10.95-0ubuntu2.6~14.04.12.10.95-0ubuntu2.6~14.04.3 |
2.10.95-0ubuntu2.6~14.04.4 |
apparmorUbuntu:16.04:LTS |
before 2.10.95-0ubuntu2.10, plus listed versions 2.10-0ubuntu62.10-0ubuntu72.10-0ubuntu82.10-0ubuntu102.10-0ubuntu11 Show 11 moreShow less2.10-0ubuntu122.10-3ubuntu12.10-3ubuntu22.10.95-0ubuntu12.10.95-0ubuntu22.10.95-0ubuntu2.22.10.95-0ubuntu2.52.10.95-0ubuntu2.62.10.95-0ubuntu2.72.10.95-0ubuntu2.82.10.95-0ubuntu2.9 |
2.10.95-0ubuntu2.10 |
apparmorUbuntu:18.04:LTS |
before 2.12-4ubuntu5.1, plus listed versions 2.11.0-2ubuntu172.11.0-2ubuntu182.11.0-2ubuntu192.12-4ubuntu12.12-4ubuntu22.12-4ubuntu32.12-4ubuntu42.12-4ubuntu5 |
2.12-4ubuntu5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3784-1 is a vulnerability with no CVSS score yet in apparmor, published October 4, 2018. No source lists public exploit code. Fixed in apparmor 2.10.95-0ubuntu2.6~14.04.4.