This bug was fixed in the package content-hub -
0.0+15.10.20150603-0ubuntu1
---------------
content-hub (0.0+15.10.20150603-0ubuntu1) wily; urgency=medium
[ Ken VanDine ]
* SECURITY UPDATE: file disclosure via unchecked AppArmor profile (LP:
#1456628) Don't allow exporting of files that aren't allowed by the
source apparmor profile CVE-2015-1327 (LP: #1456628)
-- CI Train Bot <[email protected]> Wed, 03 Jun 2015 17:45:36
+0000
** Changed in: content-hub (Ubuntu)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1456628
Title:
DBUS API doesn't prevent confined apps from passing paths to files
without access
To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1456628/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
