snapd (2.57.6-1+deb12u1) bookworm-security; urgency=high
authorSalvatore Bonaccorso <carnil@debian.org>
Tue, 17 Mar 2026 21:17:14 +0000 (22:17 +0100)
committerSalvatore Bonaccorso <carnil@debian.org>
Tue, 17 Mar 2026 21:17:14 +0000 (22:17 +0100)
commit920d8c3ef8cef5da222f058dc5c65acef5b9124e
treeb86ed4edb149caacc14d1abf6c697ce950de1130
parentbf56af01beaa23343c39871e565a68e68fa29206
parent147cd65b8df5ac912532dc9c3f5bfe5b6e3754ee
snapd (2.57.6-1+deb12u1) bookworm-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * data/systemd-tmpfiles: protect the per-snap tmp
  * data: more precise prune pattern for tmpfiles (CVE-2026-3888)
    (Closes: #1131120)

[dgit import unpatched snapd 2.57.6-1+deb12u1]
39 files changed:
debian/README.Source
debian/changelog
debian/compat
debian/control
debian/copyright
debian/gbp.conf
debian/golang-github-snapcore-snapd-dev.install
debian/not-installed
debian/patches/0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch
debian/patches/0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch
debian/patches/0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch
debian/patches/0005-advisor-errtracker-use-upstream-bolt-package.patch
debian/patches/0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch
debian/patches/0010-man-page-sections.patch
debian/patches/0011-Fix-test-with-godbus-5.0.5.patch
debian/patches/0015-fix-build-5bd97b39a03.patch
debian/patches/0016-skip-TestPopulateFromSeedWithConnectHook.patch
debian/patches/data-more-precise-prune-pattern-for-tmpfiles.patch
debian/patches/data-systemd-tmpfiles-protect-the-per-snap-tmp-16197.patch
debian/patches/series
debian/rules
debian/snap-confine.maintscript
debian/snapd.autoimport.udev
debian/snapd.dirs
debian/snapd.install
debian/snapd.links
debian/snapd.lintian-overrides
debian/snapd.maintscript
debian/snapd.manpages
debian/snapd.postinst
debian/snapd.postrm
debian/snapd.prerm
debian/source/format
debian/source/options
debian/tests/README.md
debian/tests/control
debian/tests/integrationtests
debian/tests/testconfig.json
debian/watch