Format: 1.8 Date: Tue, 15 Feb 2022 17:45:13 +0100 Source: snapd Binary: snap-confine snapd snapd-xdg-open ubuntu-core-launcher Architecture: ppc64el ppc64el_translations Version: 2.54.3+20.04 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Michael Vogt Description: snap-confine - Transitional package for snapd snapd - Daemon and tooling that enable snap packages snapd-xdg-open - Transitional package for snapd-xdg-open ubuntu-core-launcher - Transitional package for snapd Launchpad-Bugs-Fixed: 1910298 1949368 Changes: snapd (2.54.3+20.04) focal-security; urgency=medium . * SECURITY UPDATE: Sensitive information exposure - usersession/autostart: change ~/snap perms to 0700 on startup. - cmd: create ~/snap dir with 0700 perms. - CVE-2021-3155 - LP: #1910298 * SECURITY UPDATE: Local privilege escalation - snap-confine: Add validations of the location of the snap-confine binary within snapd. - snap-confine: Fix race condition in snap-confine when preparing a private mount namespace for a snap. - CVE-2021-44730 - CVE-2021-44731 * SECURITY UPDATE: Data injection from malicious snaps - interfaces: Add validations of snap content interface and layout paths in snapd. - CVE-2021-4120 - LP: #1949368 Checksums-Sha1: 9b68f85d1a03785fdd5664b137536bcc81e4fc35 1788 snap-confine_2.54.3+20.04_ppc64el.deb 7260b3f7443db5ace4bd042fcf89be8d0fa3877a 3566128 snapd-dbgsym_2.54.3+20.04_ppc64el.ddeb 60e91ab981187b2ad5ece97f30ee88f31d2f839f 1632 snapd-xdg-open_2.54.3+20.04_ppc64el.deb 5ac43900456d0482a4b1879680a9a23845342fa0 11527 snapd_2.54.3+20.04_ppc64el.buildinfo d2a81b020d4df2ee582b361f722117804334631f 30208216 snapd_2.54.3+20.04_ppc64el.deb 5d656452b6b5f913aa1508779e2c6f86d912ebe2 619817 snapd_2.54.3+20.04_ppc64el_translations.tar.gz 9bfaacc5499898b4a6f9cd8f282209f99f6858e6 1644 ubuntu-core-launcher_2.54.3+20.04_ppc64el.deb Checksums-Sha256: a016791c9feb062175c572a093bc1a50ca5bc528c17f6fe0f3ba15ea1d85a013 1788 snap-confine_2.54.3+20.04_ppc64el.deb adaf533ed94adb2f9911c348200106b8a542d401c222fd218014297bac4208f7 3566128 snapd-dbgsym_2.54.3+20.04_ppc64el.ddeb db67e80a5ac404633518f9e41a4a2a52d832c1b5a7cdc4cb3aebee71cb21f460 1632 snapd-xdg-open_2.54.3+20.04_ppc64el.deb 3da8dea73f9c93ff7d5b59222f742df4c0735480dd1fd6092d95e43ff65fff29 11527 snapd_2.54.3+20.04_ppc64el.buildinfo af3acee50fdccfe1e0d050561477b08df6262c172c05115f76e864dd33522e7c 30208216 snapd_2.54.3+20.04_ppc64el.deb dc0dd74a6b55d8341aaf4fe30372036839dd3603292f8c00b4d80f831e751985 619817 snapd_2.54.3+20.04_ppc64el_translations.tar.gz 068e5a052f513068a3b4eeabdb59649543b7e11b174a6b1d8a875257680b01f8 1644 ubuntu-core-launcher_2.54.3+20.04_ppc64el.deb Files: 1d7fbd6c5d4cbe370f0056d39a5649dc 1788 oldlibs optional snap-confine_2.54.3+20.04_ppc64el.deb a65fdef393cd04ee46eb14742d2008cc 3566128 debug optional snapd-dbgsym_2.54.3+20.04_ppc64el.ddeb 2da71b4d8e9d6b8efa58cd8e555fffdf 1632 oldlibs optional snapd-xdg-open_2.54.3+20.04_ppc64el.deb 2fb46de70cd58195ea28137a4c03f790 11527 devel optional snapd_2.54.3+20.04_ppc64el.buildinfo b50f44fdc7aafae77a32435d4ab52851 30208216 devel optional snapd_2.54.3+20.04_ppc64el.deb 934d0d6de5a677a609d34c4587de9565 619817 raw-translations - snapd_2.54.3+20.04_ppc64el_translations.tar.gz c349b2f12e70ac97ee4802ffef4efae4 1644 oldlibs optional ubuntu-core-launcher_2.54.3+20.04_ppc64el.deb