• Accepted snapd 2.49-1+deb11u1 (source) into proposed-updates->stable-ne

    From Debian FTP Masters@21:1/5 to All on Sat Feb 19 18:10:01 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    Format: 1.8
    Date: Wed, 16 Feb 2022 10:56:34 +0100
    Source: snapd
    Built-For-Profiles: noudeb
    Architecture: source
    Version: 2.49-1+deb11u1
    Distribution: bullseye-security
    Urgency: high
    Maintainer: Michael Hudson-Doyle <mwhudson@debian.org>
    Changed-By: Michael Vogt <mvo@debian.org>
    Launchpad-Bugs-Fixed: 1949368
    Changes:
    snapd (2.49-1+deb11u1) bullseye-security; urgency=high
    .
    * SECURITY UPDATE: local privilege escalation
    - 0015-cve-2021-44730-44731-4120.patch: Add validations of the
    location of the snap-confine binary within snapd.
    - 0015-cve-2021-44730-44731-4120: Fix race condition in snap-confine
    when preparing a private mount namespace for a snap.
    - 0016-cve-2021-2021-44730-44731-4120-auto-remove.patch: automatic
    remove vulnerable inactive core/snapd snaps
    - CVE-2021-44730
    - CVE-2021-44731
    * SECURITY UPDATE: data injection from malicious snaps
    - 0015-cve-2021-44730-44731-4120: Add validations of snap content
    interface and layout paths in snapd
    - CVE-2021-4120
    - LP: #1949368
    Checksums-Sha1:
    e25dcb8d2159f97af56e18a9a327a36396612db5 3591 snapd_2.49-1+deb11u1.dsc
    1722701371619404e2a832af12df8c768fb2849c 5032853 snapd_2.49.orig.tar.gz
    911001aa6244afd164094592c65a8f8fa2bed3c0 121688 snapd_2.49-1+deb11u1.debian.tar.xz
    f6ac8baddcad04f33a78bf61ff7e14f3da166662 16046 snapd_2.49-1+deb11u1_source.buildinfo
    Checksums-Sha256:
    4b58675af811b5296bcbc0f48c6dabc6503b762d430ed5dfab455cc728c11e22 3591 snapd_2.49-1+deb11u1.dsc
    8da73f19017bc129d4ee444c90993445a1748e63d6a3cf5192aac1fa3ecac9f8 5032853 snapd_2.49.orig.tar.gz
    781c2b949378f1c8cd807c275f1a8e76b8e865fbba99183821b3a7fcee889e44 121688 snapd_2.49-1+deb11u1.debian.tar.xz
    be08290f81ac059fc6d150b18744d4125d35c095c8696b0df9d44b94188f3036 16046 snapd_2.49-1+deb11u1_source.buildinfo
    Files:
    6d4ba523399d66620fb2e21983519846 3591 devel optional snapd_2.49-1+deb11u1.dsc
    5dbcaccd61d1844434397e5f83222996 5032853 devel optional snapd_2.49.orig.tar.gz
    93f9cd6418741083dd54c8d8c9e5fe57 121688 devel optional snapd_2.49-1+deb11u1.debian.tar.xz
    ce6729f09a03b1b2ce722df573fbffff 16046 devel optional snapd_2.49-1+deb11u1_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQJDBAEBCAAtFiEE2mxnVNiIdibNBqEomMq7Or1MpZ4FAmINauYPHG12b0BkZWJp YW4ub3JnAAoJEJjKuzq9TKWe57wP/RMJNhxYmMeBD7lbIRrFS8+teoMANDQs1Ost KzJJv3aI7OTxHxfwUyjkWa57OP8Qpjr15IG+NxFvLmqtq/2Yzx3QfaGW3CdyZueq QYdmJ+chjusDGeeapS/BY746FQWrz9066skV/hWvaC62HvVJqtSD5ua83+CWDfQj c0S97tSntJ9H8tA0GvPq5/57dQ7RrlSB5fJ3TC9JGx0Sw3WUfPhCV8FUl8bKYjhV PBpL4ZKeTvrBnS86mAl5niDvdabr1itHaAeBZ4/Vt/4XyYuBndpbKxYuwqbHo2fd oad9n9ITv9ozWm+OlvvdNv3LeEXhAt066WBYSTueveSdvnMW3wSdq/Dy5aqK2sid QN8tPa6DhzeW3FsfwwOz5bIW9gx/RX5Ek4M5tKJ6TWobcBBR+vZuI0GbGpuaxWIC ddXpSyU4MZ59oYmksk32pFlOar4BcJp9SCeVIeMs+cCD60NDNUFJ2Of0pmmgqkAO b8tsGn1cbZxqEhSY2s/i5hQ6ZrII8f9iPtnjHgTsE5HTYTvt2S/yl7zrI7k5NtB/ EvH8dUL59iIqKe+/lLjv0v2D0wFAGsWlyhhS/uFzsgngCmhE6/Vi+l7784m9thx8 f/umwadLbhbo62tUnKG14nZ36ZPox7TuyoXKF620u5hgujElYpCRSynoS7Y8Ondl
    9MpHeIaE
    =UNZJ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)