Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

apparmor-profiles: insecure profile for Chromium

Package(s):

apparmor-profiles

CVE #(s):

Created:

December 20, 2012

Updated:

January 3, 2013

Description:

From the Ubuntu advisory:

Dan Rosenberg discovered that the example AppArmor profile for chromium-browser could be escaped by calling xdg-settings with a crafted environment.

Alerts:

Ubuntu

2012-12-19

(Log in to post comments)