CVE-2016-1585

https://bugs.launchpad.net/apparmor/+bug/1597017

https://bugzilla.opensuse.org/show_bug.cgi?id=995594

Introduced around AppArmor 2.8 upstream.

Mount rules support is enabled in Debian, but the impact of the issue is

limited to 1. lxc (not a regression, as Debian never confined LXC with AppArmor

by default before buster, in particular not with mount rules), 2. libvirtd

but the profile is not meant to be a strong security boundary.

https://bugs.launchpad.net/apparmor/+bug/1597017/comments/6

https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.10

Fixed by: https://gitlab.com/apparmor/apparmor/-/commit/262fd11359432888292952e5ed29bead5ace16f0 (v3.0.10)

Negligible security impact / known limitation