-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 16 Feb 2022 10:56:34 +0100
Source: snapd
Built-For-Profiles: noudeb
Architecture: source
Version: 2.49-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Michael Hudson-Doyle <mwhudson@debian.org>
Changed-By: Michael Vogt <mvo@debian.org>
Launchpad-Bugs-Fixed: 1949368
Changes:
snapd (2.49-1+deb11u1) bullseye-security; urgency=high
.
* SECURITY UPDATE: local privilege escalation
- 0015-cve-2021-44730-44731-4120.patch: Add validations of the
location of the snap-confine binary within snapd.
- 0015-cve-2021-44730-44731-4120: Fix race condition in snap-confine
when preparing a private mount namespace for a snap.
- 0016-cve-2021-2021-44730-44731-4120-auto-remove.patch: automatic
remove vulnerable inactive core/snapd snaps
- CVE-2021-44730
- CVE-2021-44731
* SECURITY UPDATE: data injection from malicious snaps
- 0015-cve-2021-44730-44731-4120: Add validations of snap content
interface and layout paths in snapd
- CVE-2021-4120
- LP: #1949368
Checksums-Sha1:
e25dcb8d2159f97af56e18a9a327a36396612db5 3591 snapd_2.49-1+deb11u1.dsc
1722701371619404e2a832af12df8c768fb2849c 5032853 snapd_2.49.orig.tar.gz
911001aa6244afd164094592c65a8f8fa2bed3c0 121688 snapd_2.49-1+deb11u1.debian.tar.xz
f6ac8baddcad04f33a78bf61ff7e14f3da166662 16046 snapd_2.49-1+deb11u1_source.buildinfo
Checksums-Sha256:
4b58675af811b5296bcbc0f48c6dabc6503b762d430ed5dfab455cc728c11e22 3591 snapd_2.49-1+deb11u1.dsc
8da73f19017bc129d4ee444c90993445a1748e63d6a3cf5192aac1fa3ecac9f8 5032853 snapd_2.49.orig.tar.gz
781c2b949378f1c8cd807c275f1a8e76b8e865fbba99183821b3a7fcee889e44 121688 snapd_2.49-1+deb11u1.debian.tar.xz
be08290f81ac059fc6d150b18744d4125d35c095c8696b0df9d44b94188f3036 16046 snapd_2.49-1+deb11u1_source.buildinfo
Files:
6d4ba523399d66620fb2e21983519846 3591 devel optional snapd_2.49-1+deb11u1.dsc
5dbcaccd61d1844434397e5f83222996 5032853 devel optional snapd_2.49.orig.tar.gz
93f9cd6418741083dd54c8d8c9e5fe57 121688 devel optional snapd_2.49-1+deb11u1.debian.tar.xz
ce6729f09a03b1b2ce722df573fbffff 16046 devel optional snapd_2.49-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=UNZJ
-----END PGP SIGNATURE-----