UbuntuUpdates.org

Package "snap-confine"

Name: snap-confine

Description:

Transitional package for snapd
Latest version: 2.68.5+ubuntu22.04.1
Release: jammy (22.04)
Level: updates
Repository: universe
Head package: snapd
Homepage: https://github.com/snapcore/snapd

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "snap-confine"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "snap-confine" in Jammy

Repository Area Version
base universe 2.55.3+22.04
security universe 2.63+22.04ubuntu0.1

Changelog

Version: 2.68.5+ubuntu22.04.1 2025-08-14 16:07:19 UTC

  snapd (2.68.5+ubuntu22.04.1) jammy; urgency=medium

  * New upstream release, LP: #2098137
    -LP: #2109843 fix missing preseed files when running in a container
Source diff to previous version
2098137 [SRU] 2.68.5
2109843 snapd.seeded.service has considerably slowed down

Version: 2.67.1+22.04 2025-03-10 23:07:03 UTC

  snapd (2.67.1+22.04) jammy; urgency=medium

  * New upstream release, LP: #2089691
    - Fix apparmor permissions to allow snaps access to kernel modules
      and firmware on UC24, which also fixes the kernel-modules-control
      interface on UC24
    - AppArmor prompting (experimental): disallow /./ and /../ in path
      patterns
    - LP: #2090938 Fix 'snap run' getent based user lookup in case of bad PATH
    - Fix snapd using the incorrect AppArmor version during undo of an
      refresh for regenerating snap profiles
    - Add new syscalls to base templates
    - hardware-observe interface: allow riscv_hwprobe syscall
    - mount-observe interface: allow listmount and statmount syscalls
Source diff to previous version
2089691 [SRU] 2.67.1
2090938 $SNAP_USER_COMMON empty when getent cannot be found in $PATH

Version: 2.66.1+22.04 2024-11-26 17:07:02 UTC

  snapd (2.66.1+22.04) jammy; urgency=medium

  * New upstream release, LP: #2083490
    - AppArmor prompting (experimental): Fix kernel prompting support
      check
    - Allow kernel snaps to have content slots
    - Fix ignoring snaps in try mode when amending
Source diff to previous version
2083490 [SRU] 2.66.1

Version: 2.65.3+22.04 2024-10-15 18:11:32 UTC

  snapd (2.65.3+22.04) jammy; urgency=medium

  * New upstream release, LP: #2077473
    - Fix missing aux info from store on snap setup
Source diff to previous version
2077473 [SRU] 2.65.1

Version: 2.63+22.04ubuntu0.1 2024-08-01 10:07:16 UTC

  snapd (2.63+22.04ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: sandbox escape via $HOME/bin
    - interfaces/builtin/home: explicitly deny writing to @{HOME}/bin
    - CVE-2024-1724
  * SECURITY UPDATE: denial-of-service via crafted files in squashfs image
    - snap, snapdir, squashfs: improve validation of target file
      mode/types
    - CVE-2024-29068
  * SECURITY UPDATE: information disclosure via crafted symlinks in
    squashfs image
    - snap, snapdir, squashfs: improve external symlink validation
    - CVE-2024-29069
  * Fix FTBFS due to missing systemd from Build-Depends
    - debian/control: add systemd to Build-Depends to ensure pkg-config
      can find the systemdutildir to install into

 -- Alex Murray <email address hidden> Fri, 26 Jul 2024 12:27:32 +0930
CVE-2024-1724 In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path.
CVE-2024-29068 In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image
CVE-2024-29069 In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squas


About   -   Send Feedback to @ubuntu_updates