ubuntu-core-launcher uses incorrect glob, doesn't check for exactly one match
Bug #1576699 reported by
Zygmunt Krynicki
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| ubuntu-core-launcher (Ubuntu) |
Fix Released
|
High
|
Jamie Strandboge | ||
| Xenial |
Fix Released
|
High
|
Jamie Strandboge | ||
| Yakkety |
Fix Released
|
High
|
Jamie Strandboge | ||
Bug Description
A review of ubuntu-
Due to the glob the launcher may, at random, depending on glob result ordering, choose to mount that snap instead of the real ubuntu-core snap into the filesystem namespace of all newly started application processes.
The bug is possible due to incorrect glob and due to incorrect size check.
CVE References
| description: | updated |
| Changed in ubuntu-core-launcher (Ubuntu): | |
| importance: | Undecided → Critical |
| status: | New → Triaged |
| Changed in ubuntu-core-launcher (Ubuntu): | |
| importance: | Critical → High |
| description: | updated |
| Changed in ubuntu-core-launcher (Ubuntu Yakkety): | |
| status: | In Progress → Fix Committed |
To post a comment you must log in.

This was introduced in r83 in https:/ /code.launchpad .net/~mvo/ ubuntu- core-launcher/ snappy- on-ubuntu/ +merge/ 278938.