snapd 2.54.3+22.04.1 source package in Ubuntu

Changelog

snapd (2.54.3+22.04.1) jammy; urgency=medium

  * SECURITY UPDATE: Sensitive information exposure
    - usersession/autostart: change ~/snap perms to 0700 on startup.
    - cmd: create ~/snap dir with 0700 perms.
    - CVE-2021-3155
    - LP: #1910298
  * SECURITY UPDATE: Local privilege escalation
    - snap-confine: Add validations of the location of the snap-confine
      binary within snapd.
    - snap-confine: Fix race condition in snap-confine when preparing a
      private mount namespace for a snap.
    - CVE-2021-44730
    - CVE-2021-44731
  * SECURITY UPDATE: Data injection from malicious snaps
    - interfaces: Add validations of snap content interface and layout
      paths in snapd.
    - CVE-2021-4120
    - LP: #1949368

 -- Michael Vogt <email address hidden>  Tue, 15 Feb 2022 17:45:13 +0100

Upload details

Uploaded by:
Michael Vogt
Sponsored by:
Paulo Flabiano Smorigo
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
snapd_2.54.3+22.04.1.tar.xz 4.6 MiB 3e4c09a59f9fca1f05799231f45e5c6a650959961f6c82e842849096d26faf46
snapd_2.54.3+22.04.1.dsc 2.9 KiB 020e55a6fc63fa9e2d7677b4c9fd0da7645ca8967fbe3603d9be29bfce78373f

View changes file

Binary packages built by this source

golang-github-snapcore-snapd-dev: snappy development go packages.

 Use these to use the snappy API.

golang-github-ubuntu-core-snappy-dev: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

snap-confine: Transitional package for snapd

 This is a transitional dummy package. It can safely be removed.

snapd: Daemon and tooling that enable snap packages

 Install, configure, refresh and remove snap packages. Snaps are
 'universal' packages that work across many different Linux systems,
 enabling secure distribution of the latest apps and utilities for
 cloud, servers, desktops and the internet of things.
 .
 Start with 'snap list' to see installed snaps.

snapd-dbgsym: debug symbols for snapd
snapd-xdg-open: Transitional package for snapd-xdg-open

 This is a transitional dummy package. It can safely be removed.

ubuntu-core-launcher: Transitional package for snapd

 This is a transitional dummy package. It can safely be removed.

ubuntu-core-snapd-units: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

ubuntu-snappy: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

ubuntu-snappy-cli: transitional dummy package

 This is a transitional dummy package. It can safely be removed.