{"id":"USN-3784-1","aliases":[],"status":"published","title":"AppArmor update","description":"As a security improvement, this update adjusts the private-files abstraction to\ndisallow writing to thumbnailer configuration files. Additionally adjust the\nprivate-files, private-files-strict and user-files abstractions to disallow\nwrites on parent directories of sensitive files.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-10-04T21:34:40Z","modified":"2026-04-22T09:50:44Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"apparmor","fixed_in":["2.10.95-0ubuntu2.6~14.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"apparmor","fixed_in":["2.10.95-0ubuntu2.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"apparmor","fixed_in":["2.12-4ubuntu5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.95-0ubuntu2.6~14.04.4"}]}],"versions":["2.8.0-0ubuntu31","2.8.0-0ubuntu32","2.8.0-0ubuntu33","2.8.0-0ubuntu34","2.8.0-0ubuntu35","2.8.0-0ubuntu37","2.8.0-0ubuntu38","2.8.95~2430-0ubuntu1","2.8.95~2430-0ubuntu2","2.8.95~2430-0ubuntu3","2.8.95~2430-0ubuntu5","2.8.95~2430-0ubuntu5.1","2.8.95~2430-0ubuntu5.2","2.8.95~2430-0ubuntu5.3","2.10.95-0ubuntu2.5~14.04.1","2.10.95-0ubuntu2.6~14.04.1","2.10.95-0ubuntu2.6~14.04.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.95-0ubuntu2.10"}]}],"versions":["2.10-0ubuntu6","2.10-0ubuntu7","2.10-0ubuntu8","2.10-0ubuntu10","2.10-0ubuntu11","2.10-0ubuntu12","2.10-3ubuntu1","2.10-3ubuntu2","2.10.95-0ubuntu1","2.10.95-0ubuntu2","2.10.95-0ubuntu2.2","2.10.95-0ubuntu2.5","2.10.95-0ubuntu2.6","2.10.95-0ubuntu2.7","2.10.95-0ubuntu2.8","2.10.95-0ubuntu2.9"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"apparmor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-4ubuntu5.1"}]}],"versions":["2.11.0-2ubuntu17","2.11.0-2ubuntu18","2.11.0-2ubuntu19","2.12-4ubuntu1","2.12-4ubuntu2","2.12-4ubuntu3","2.12-4ubuntu4","2.12-4ubuntu5"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-3784-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1788929","tags":["report"]},{"url":"https://launchpad.net/bugs/1794848","tags":["report"]}],"sources":{"osv":[{"id":"USN-3784-1","title":"AppArmor update","description":"As a security improvement, this update adjusts the private-files abstraction to\ndisallow writing to thumbnailer configuration files. Additionally adjust the\nprivate-files, private-files-strict and user-files abstractions to disallow\nwrites on parent directories of sensitive files.\n","status":"published","published":"2018-10-04T21:34:40Z","modified":"2026-04-22T09:50:44.778185Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}