Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/snapcore/snapd

5 known vulnerabilities (2 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 high, 3 medium
Registry
pkg.go.dev

Advisories 5

  • CVE-2024-29069Medium 4.8

    snapd will follow archived symlinks when unpacking a filesystem

    Affected: all versions; fixed in 2.62.

  • CVE-2024-29068Medium 5.8

    snapd non-regular file indefinite blocking read

    Affected: fixed in 2.62; all versions.

  • CVE-2024-1724Medium 6.3

    snapd allows $HOME/bin symlink

    Affected: fixed in 2.62; all versions.

  • The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf…

    Affected: all versions; from 2.51.6, fixed in 2.63.1; fixed in 0.0.0-20240524114846-68ee9c6aa916.

  • Race condition in snap-confine's must_mkdir_and_open_with_perms()

    Affected: fixed in 2.57.6; all versions.