Accepted snapd 2.54.3-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 23 Feb 2022 10:04:21 +0100
Source: snapd
Built-For-Profiles: noudeb
Architecture: source
Version: 2.54.3-1
Distribution: unstable
Urgency: high
Maintainer: Michael Hudson-Doyle <mwhudson@debian.org>
Changed-By: Michael Vogt <mvo@debian.org>
Launchpad-Bugs-Fixed: 1949368
Changes:
snapd (2.54.3-1) unstable; urgency=high
.
* SECURITY UPDATE: Local privilege escalation
- snap-confine: Add validations of the location of the snap-confine
binary within snapd.
- snap-confine: Fix race condition in snap-confine when preparing a
private mount namespace for a snap.
- CVE-2021-44730
- CVE-2021-44731
* SECURITY UPDATE: Data injection from malicious snaps
- interfaces: Add validations of snap content interface and layout
paths in snapd.
- CVE-2021-4120
- LP: #1949368
Checksums-Sha1:
ff33a9563a5a30e1d67f10b34dc58f3c2147c73f 3524 snapd_2.54.3-1.dsc
e05296f9e0d5c54e51cdabc5fe215b33763e510d 6039137 snapd_2.54.3.orig.tar.gz
04522d33bd806159229b5eb8820dd610bd19239e 116048 snapd_2.54.3-1.debian.tar.xz
e64859f22bee32fdf37888f49651cd38d80b351b 15656 snapd_2.54.3-1_source.buildinfo
Checksums-Sha256:
114ec0c9fcbe495d8c51d525f5d08b77e200f2ab3294dd0136035ecd774927df 3524 snapd_2.54.3-1.dsc
8e17faff903242402d32fd4eb6e8644066407d1a93bd6e0328490b4ab7d58861 6039137 snapd_2.54.3.orig.tar.gz
1f94801ee7b07ee27d70b063447816696e2b371dc6fb35c9cf0bfa1c6712d52d 116048 snapd_2.54.3-1.debian.tar.xz
a16f356ba26fa92e83c3c3db392a92a395cce9d1bee29704c0878110f32fba28 15656 snapd_2.54.3-1_source.buildinfo
Files:
8c9c1b51d9a3634c62c02e789ef4d2c9 3524 devel optional snapd_2.54.3-1.dsc
4a0b0a39d225e6209a628d765ee61983 6039137 devel optional snapd_2.54.3.orig.tar.gz
3baaadac4ebfed0be97f0ff048cbf091 116048 devel optional snapd_2.54.3-1.debian.tar.xz
ac33dce6a451eaaa2bb504f070ff7217 15656 devel optional snapd_2.54.3-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=LGSt
-----END PGP SIGNATURE-----