snapd 2.63+24.04ubuntu0.1 source package in Ubuntu

Changelog

snapd (2.63+24.04ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: sandbox escape via $HOME/bin
    - interfaces/builtin/home: explicitly deny writing to @{HOME}/bin
    - CVE-2024-1724
  * SECURITY UPDATE: denial-of-service via crafted files in squashfs image
    - snap, snapdir, squashfs: improve validation of target file
      mode/types
    - CVE-2024-29068
  * SECURITY UPDATE: information disclosure via crafted symlinks in
    squashfs image
    - snap, snapdir, squashfs: improve external symlink validation
    - CVE-2024-29069

 -- Alex Murray <email address hidden>  Fri, 26 Jul 2024 12:02:26 +0930

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Noble
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Noble security main devel

Downloads

File Size SHA-256 Checksum
snapd_2.63+24.04ubuntu0.1.tar.xz 7.3 MiB 18c510f107d0de51c1d2adab1cc562679bd54d62e0ba6709796221038b8cd56c
snapd_2.63+24.04ubuntu0.1.dsc 2.6 KiB 00bbc827fd417d076a39efdac4a3fa47550ffc74ecbceaf19a84400f62a72c83

View changes file

Binary packages built by this source

golang-github-snapcore-snapd-dev: snappy development go packages.

 Use these to use the snappy API.

golang-github-ubuntu-core-snappy-dev: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

snap-confine: Transitional package for snapd

 This is a transitional dummy package. It can safely be removed.

snapd: Daemon and tooling that enable snap packages

 Install, configure, refresh and remove snap packages. Snaps are
 'universal' packages that work across many different Linux systems,
 enabling secure distribution of the latest apps and utilities for
 cloud, servers, desktops and the internet of things.
 .
 Start with 'snap list' to see installed snaps.

snapd-dbgsym: debug symbols for snapd
snapd-xdg-open: Transitional package for snapd-xdg-open

 This is a transitional dummy package. It can safely be removed.

ubuntu-core-launcher: Transitional package for snapd

 This is a transitional dummy package. It can safely be removed.

ubuntu-core-snapd-units: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

ubuntu-snappy: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

ubuntu-snappy-cli: transitional dummy package

 This is a transitional dummy package. It can safely be removed.