Ubuntu
snapd package

snapd 2.63+20.04ubuntu0.1 source package in Ubuntu

Changelog

snapd (2.63+20.04ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: sandbox escape via $HOME/bin
    - interfaces/builtin/home: explicitly deny writing to @{HOME}/bin
    - CVE-2024-1724
  * SECURITY UPDATE: denial-of-service via crafted files in squashfs image
    - snap, snapdir, squashfs: improve validation of target file
      mode/types
    - CVE-2024-29068
  * SECURITY UPDATE: information disclosure via crafted symlinks in
    squashfs image
    - snap, snapdir, squashfs: improve external symlink validation
    - CVE-2024-29069
  * Fix FTBFS due to missing systemd from Build-Depends
    - debian/control: add systemd to Build-Depends to ensure pkg-config
      can find the systemdutildir to install into

 -- Alex Murray <email address hidden>  Fri, 26 Jul 2024 12:28:53 +0930

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main devel
Focal security main devel

Downloads

File Size SHA-256 Checksum
snapd_2.63+20.04ubuntu0.1.tar.xz 7.1 MiB 50bb67135688a6995288b012bdfe2f4672d425935f3dab8683070d443734c272
snapd_2.63+20.04ubuntu0.1.dsc 2.6 KiB 13e6dfe537bf150607ee237d30513de1f885a96b9c46fddf2b2a73aea85d17d3

View changes file

Binary packages built by this source

golang-github-snapcore-snapd-dev: snappy development go packages.

 Use these to use the snappy API.

golang-github-ubuntu-core-snappy-dev: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

snap-confine: Transitional package for snapd

 This is a transitional dummy package. It can safely be removed.

snapd: Daemon and tooling that enable snap packages

 Install, configure, refresh and remove snap packages. Snaps are
 'universal' packages that work across many different Linux systems,
 enabling secure distribution of the latest apps and utilities for
 cloud, servers, desktops and the internet of things.
 .
 Start with 'snap list' to see installed snaps.

snapd-dbgsym: debug symbols for snapd
snapd-xdg-open: Transitional package for snapd-xdg-open

 This is a transitional dummy package. It can safely be removed.

ubuntu-core-launcher: Transitional package for snapd

 This is a transitional dummy package. It can safely be removed.

ubuntu-core-snapd-units: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

ubuntu-snappy: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

ubuntu-snappy-cli: transitional dummy package

 This is a transitional dummy package. It can safely be removed.