snapd (2.49-1+deb11u2) bullseye-security; urgency=high
authorAlex Murray <alex.murray@canonical.com>
Mon, 28 Nov 2022 10:37:00 +0000 (10:37 +0000)
committerAlex Murray <alex.murray@canonical.com>
Mon, 28 Nov 2022 10:37:00 +0000 (10:37 +0000)
commit7eefcfb027c65f9441a42462c9c8bc2f018fec2e
tree908f24426420c7f4691129e280d8614fc87affad
parent11e10616c3e5ff8339c6ea17fc2da82a1256ff7e
parentef3f587e85d616f76786c86e5bf3698ee3d8c9f2
snapd (2.49-1+deb11u2) bullseye-security; urgency=high

  * SECURITY UPDATE: Local privilege escalation
    - snap-confine: Fix race condition in snap-confine when preparing a
      private tmp mount namespace for a snap
    - CVE-2022-3328

[dgit import unpatched snapd 2.49-1+deb11u2]
44 files changed:
debian/README.Source
debian/changelog
debian/compat
debian/control
debian/copyright
debian/gbp.conf
debian/golang-github-snapcore-snapd-dev.install
debian/not-installed
debian/patches/0001-cmd-snap-seccomp-use-upstream-seccomp-package.patch
debian/patches/0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch
debian/patches/0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch
debian/patches/0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch
debian/patches/0005-advisor-errtracker-use-upstream-bolt-package.patch
debian/patches/0006-systemd-disable-snapfuse-system.patch
debian/patches/0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch
debian/patches/0010-man-page-sections.patch
debian/patches/0013-cherry-pick-pr9936.patch
debian/patches/0015-cve-2021-44730-44731-4120.patch
debian/patches/0016-cve-2021-2021-44730-44731-4120-auto-remove.patch
debian/patches/0017-cve-2022-3328-1.patch
debian/patches/0018-cve-2022-3328-2.patch
debian/patches/0019-cve-2022-3328-3.patch
debian/patches/no-seccomp-fork.patch
debian/patches/no-snapfuse.patch
debian/patches/series
debian/rules
debian/snap-confine.maintscript
debian/snapd.autoimport.udev
debian/snapd.dirs
debian/snapd.install
debian/snapd.links
debian/snapd.lintian-overrides
debian/snapd.maintscript
debian/snapd.manpages
debian/snapd.postinst
debian/snapd.postrm
debian/snapd.prerm
debian/source/format
debian/source/options
debian/tests/README.md
debian/tests/control
debian/tests/integrationtests
debian/tests/testconfig.json
debian/watch