~phablet-team/content-hub/15.04

Committer: CI Train Bot
Author(s): Ken VanDine
Date: 2015-06-03 17:45:37 UTC
mfrom: (208.1.1 15.04-lp1456628)
Revision ID: ci-train-bot@canonical.com-20150603174537-3wq910qtwos6l9z9

* SECURITY UPDATE: file disclosure via unchecked AppArmor profile
    (LP: #1456628)
  - Don't allow exporting of files that aren't allowed by the source apparmor profile
  - CVE-2015-1327 Fixes: #1456628
Approved by: Michael Sheldon

files added:
debian/apparmor

debian/apparmor/content-hub-testability

debian/tests

debian/tests/aa-check

debian/tests/control

files modified:
CMakeLists.txt

debian/content-hub-testability.install

debian/control

debian/rules

src/com/ubuntu/content/CMakeLists.txt

src/com/ubuntu/content/detail/service.h

src/com/ubuntu/content/detail/transfer.cpp

src/com/ubuntu/content/detail/transfer.h

src/com/ubuntu/content/utils.cpp

tests/peers/exporter/CMakeLists.txt

tests/peers/exporter/autoexporter.cpp

tests/peers/exporter/autoexporter.h

tests/peers/exporter/exporter.cpp

Show diffs side-by-side

added added

removed removed

CMakeLists.txt

pkg_check_modules(DBUS REQUIRED dbus-1)

pkg_check_modules(UBUNTU_DOWNLOAD_MANAGER REQUIRED ubuntu-download-manager-client)

pkg_check_modules(NOTIFY REQUIRED libnotify)

pkg_check_modules(APPARMOR REQUIRED libapparmor)

add_definitions(-DDEBUG_ENABLED)

Older »