snapd.git
5 years ago[PATCH 1/9] cmd/snap-seccomp: use upstream seccomp package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:48:46 +0000 (15:48 +0200)]
[PATCH 1/9] cmd/snap-seccomp: use upstream seccomp package

Upstream snapd uses a fork that carries additional compatibility patch
required to build snapd for Ubuntu 14.04. This patch is not required with
the latest snapshot of the upstream seccomp golang bindings but they are
neither released upstream nor backported (in their entirety) to Ubuntu
14.04.

The forked seccomp library is not packaged in Debian. As such, to build
snapd, we need to switch to the regular, non-forked package name.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0001-cmd-snap-seccomp-use-upstream-seccomp-package.patch

5 years agosnapd (2.45.2-1) unstable; urgency=high
Michael Vogt [Fri, 10 Jul 2020 18:06:29 +0000 (19:06 +0100)]
snapd (2.45.2-1) unstable; urgency=high

  * SECURITY UPDATE: sandbox escape vulnerability on snapctl xdg-open
    implementation
    - usersession/userd/launcher.go: remove XDG_DATA_DIRS environment
      variable modification when calling the system xdg-open. Patch
      thanks to James Henstridge
    - packaging/ubuntu-16.04/snapd.postinst: ensure "snap userd" is
      restarted. Patch thanks to Michael Vogt
    - CVE-2020-11934
  * SECURITY UPDATE: arbitrary code execution vulnerability on core
    devices with access to physical removable media
    - devicestate: Disable/restrict cloud-init after seeding.
    - CVE-2020-11933

[dgit import unpatched snapd 2.45.2-1]

5 years agoImport snapd_2.45.2.orig.tar.gz
Michael Vogt [Fri, 10 Jul 2020 18:06:29 +0000 (19:06 +0100)]
Import snapd_2.45.2.orig.tar.gz

[dgit import orig snapd_2.45.2.orig.tar.gz]

5 years agoImport snapd_2.45.2-1.debian.tar.xz
Michael Vogt [Fri, 10 Jul 2020 18:06:29 +0000 (19:06 +0100)]
Import snapd_2.45.2-1.debian.tar.xz

[dgit import tarball snapd 2.45.2-1 snapd_2.45.2-1.debian.tar.xz]