snapd 2.54.3+21.10.1 source package in Ubuntu

Changelog

snapd (2.54.3+21.10.1) impish-security; urgency=medium

  * SECURITY UPDATE: Sensitive information exposure
    - usersession/autostart: change ~/snap perms to 0700 on startup.
    - cmd: create ~/snap dir with 0700 perms.
    - CVE-2021-3155
    - LP: #1910298
  * SECURITY UPDATE: Local privilege escalation
    - snap-confine: Add validations of the location of the snap-confine
      binary within snapd.
    - snap-confine: Fix race condition in snap-confine when preparing a
      private mount namespace for a snap.
    - CVE-2021-44730
    - CVE-2021-44731
  * SECURITY UPDATE: Data injection from malicious snaps
    - interfaces: Add validations of snap content interface and layout
      paths in snapd.
    - CVE-2021-4120
    - LP: #1949368

 -- Michael Vogt <email address hidden>  Tue, 15 Feb 2022 17:45:13 +0100

Upload details

Uploaded by:
Michael Vogt
Sponsored by:
Paulo Flabiano Smorigo
Uploaded to:
Impish
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
snapd_2.54.3+21.10.1.tar.xz 4.6 MiB 1e26eb13d35b0daec54472533f36bceab8fd06ff29d695fdf5f6ec3804945132
snapd_2.54.3+21.10.1.dsc 2.9 KiB fcae407e9871e696fa950772b3b89dae5063798fcec778497db4766480b1c888

View changes file

Binary packages built by this source

golang-github-snapcore-snapd-dev: No summary available for golang-github-snapcore-snapd-dev in ubuntu impish.

No description available for golang-github-snapcore-snapd-dev in ubuntu impish.

golang-github-ubuntu-core-snappy-dev: No summary available for golang-github-ubuntu-core-snappy-dev in ubuntu impish.

No description available for golang-github-ubuntu-core-snappy-dev in ubuntu impish.

snap-confine: No summary available for snap-confine in ubuntu impish.

No description available for snap-confine in ubuntu impish.

snapd: No summary available for snapd in ubuntu impish.

No description available for snapd in ubuntu impish.

snapd-dbgsym: No summary available for snapd-dbgsym in ubuntu impish.

No description available for snapd-dbgsym in ubuntu impish.

snapd-xdg-open: No summary available for snapd-xdg-open in ubuntu impish.

No description available for snapd-xdg-open in ubuntu impish.

ubuntu-core-launcher: No summary available for ubuntu-core-launcher in ubuntu impish.

No description available for ubuntu-core-launcher in ubuntu impish.

ubuntu-core-snapd-units: No summary available for ubuntu-core-snapd-units in ubuntu impish.

No description available for ubuntu-core-snapd-units in ubuntu impish.

ubuntu-snappy: No summary available for ubuntu-snappy in ubuntu impish.

No description available for ubuntu-snappy in ubuntu impish.

ubuntu-snappy-cli: No summary available for ubuntu-snappy-cli in ubuntu impish.

No description available for ubuntu-snappy-cli in ubuntu impish.