Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Ubuntu 18.04/16.04 LTS: USN-4024-1 Critical: Evince AppArmor Policy Update

ubuntu
Calendar Grey June 19, 2019
Dist Ubuntu Esm H88
This document outlines Ubuntu Security Notice USN-4024-1 which includes updates to Evince, aimed at refining AppArmor policies to improve surveillance over system access.
Use more restrictive AppArmor policy for Evince binaries.

Summary

Use more restrictive AppArmor policy for Evince binaries.

Software Description:

- evince: Document viewer

Details:

As a security improvement, this update adjusts the AppArmor profile for the

Evince thumbnailer to reduce access to the system and adjusts the AppArmor

profile for Evince and Evince previewer to limit access to the DBus system

bus. Additionally adjust the evince abstraction to disallow writes on

parent directories of sensitive files.

Topics%20covered

Topics Covered

security advisory access control ubuntu document viewer apparmor policy adjustment evince

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  evince-common                   3.28.4-0ubuntu1.2

Ubuntu 16.04 LTS:
  evince-common                   3.18.2-1ubuntu4.5

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4024-1

https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1788929, https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1794848

Severity
critical
Lowest
Low
Medium
High
Critical

June 19, 2019

Topics%20covered

Topics Covered

security advisory access control ubuntu document viewer apparmor policy adjustment evince

Package Information

https://launchpad.net/ubuntu/+source/evince/3.28.4-0ubuntu1.2
https://launchpad.net/ubuntu/+source/evince/3.18.2-1ubuntu4.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.