AppArmor update proposal

[Michael Hudson-Doyle]

On Thu, 5 Sept 2024 at 03:31, Rodrigo Figueiredo Zaiden <
rodrigo.zaiden at canonical.com> wrote:

> Hi,
>
> The Ubuntu Security team has a proposed update for the AppArmor
> userspace utilities in focal and jammy ready to move forward that we
> would like the help of the SRU or archive admin teams.
>
> The updates are in the proposed pocket as of now [1][2], but given the
> sensitivity of the issue [3], we would like to propose it to be rolled
> out to the updates pocket in stages.


This is the default way updates are released:
https://canonical-sru-docs.readthedocs-hosted.com/en/latest/explanation/standard-processes/#phasing
-- are you asking for this to happen in a more gradual way for these
packages?

Cheers,
mwh


> We would like the new version
> (currently in proposed) promoted to the updates pocket by the SRU team.
>
> Additionally, we performed a no-change rebuild of the prior version in
> the updates pocket for both releases into the corresponding security
> pocket [4][5] to ensure that it is possible for users to relatively easily
> rollback to the prior version without regressing the prior fixes that
> had landed in those releases.
>
> We have already communicated the update through the bug itself [3]
> and also via a discourse post [6], and we have had a few comments (in
> the bug) that no issues were found in addition to our own testing,
> which is making us confident to move forward with the update using
> a safe strategy.
>
> Is that something we can have help with?
>
> [1] https://launchpad.net/ubuntu/+source/apparmor/3.0.4-2ubuntu2.4
> [2] https://launchpad.net/ubuntu/+source/apparmor/2.13.3-7ubuntu5.4
> [3] https://bugs.launchpad.net/apparmor/+bug/1597017
> [4] https://launchpad.net/ubuntu/+source/apparmor/3.0.4-2ubuntu2.3build2
> [5] https://launchpad.net/ubuntu/+source/apparmor/2.13.3-7ubuntu5.3build2
> [6]
>
> https://discourse.ubuntu.com/t/upcoming-apparmor-security-update-for-cve-2016-1585/44268
>
> Thanks!
> Rodrigo
>
>
>
> --
> Ubuntu-release mailing list
> Ubuntu-release at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-release
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-release/attachments/20240905/6601279a/attachment.html>