snapd 2.54.3+20.04 source package in Ubuntu
Changelog
snapd (2.54.3+20.04) focal-security; urgency=medium * SECURITY UPDATE: Sensitive information exposure - usersession/autostart: change ~/snap perms to 0700 on startup. - cmd: create ~/snap dir with 0700 perms. - CVE-2021-3155 - LP: #1910298 * SECURITY UPDATE: Local privilege escalation - snap-confine: Add validations of the location of the snap-confine binary within snapd. - snap-confine: Fix race condition in snap-confine when preparing a private mount namespace for a snap. - CVE-2021-44730 - CVE-2021-44731 * SECURITY UPDATE: Data injection from malicious snaps - interfaces: Add validations of snap content interface and layout paths in snapd. - CVE-2021-4120 - LP: #1949368 -- Michael Vogt <email address hidden> Tue, 15 Feb 2022 17:45:13 +0100
Upload details
- Uploaded by:
- Michael Vogt
- Sponsored by:
- Emilia Torino
- Uploaded to:
- Focal
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- devel
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
snapd_2.54.3+20.04.tar.xz | 4.6 MiB | d7e3384a12c66f02c569f35d99beaf91482e12761918cd4b103e8f7e78098e73 |
snapd_2.54.3+20.04.dsc | 2.8 KiB | 773ad1e46ce421ba750d15324baa01149f57546a66ca5965ba8081e9a343687b |
Available diffs
Binary packages built by this source
- golang-github-snapcore-snapd-dev: snappy development go packages.
Use these to use the snappy API.
- golang-github-ubuntu-core-snappy-dev: transitional dummy package
This is a transitional dummy package. It can safely be removed.
- snap-confine: Transitional package for snapd
This is a transitional dummy package. It can safely be removed.
- snapd: Daemon and tooling that enable snap packages
Install, configure, refresh and remove snap packages. Snaps are
'universal' packages that work across many different Linux systems,
enabling secure distribution of the latest apps and utilities for
cloud, servers, desktops and the internet of things.
.
Start with 'snap list' to see installed snaps.
- snapd-dbgsym: debug symbols for snapd
- snapd-xdg-open: Transitional package for snapd-xdg-open
This is a transitional dummy package. It can safely be removed.
- ubuntu-core-launcher: Transitional package for snapd
This is a transitional dummy package. It can safely be removed.
- ubuntu-core-snapd-units: transitional dummy package
This is a transitional dummy package. It can safely be removed.
- ubuntu-snappy: transitional dummy package
This is a transitional dummy package. It can safely be removed.
- ubuntu-snappy-cli: transitional dummy package
This is a transitional dummy package. It can safely be removed.