-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 24 Feb 2021 09:23:51 +0100 Source: snapd Architecture: source Version: 2.49-1 Distribution: unstable Urgency: high Maintainer: Michael Hudson-Doyle <mwhudson@debian.org> Changed-By: Michael Vogt <michael.vogt@ubuntu.com> Closes: 923500 Launchpad-Bugs-Fixed: 1910456 Changes: snapd (2.49-1) unstable; urgency=high . * New upstream release with security updates: * SECURITY UPDATE: sandbox escape vulnerability for containers (LP: #1910456) - many: add Delegate=true to generated systemd units for special interfaces - interfaces/greengrass-support: back-port interface changes to 2.48 - CVE-2020-27352 * interfaces/builtin/docker-support: allow /run/containerd/s/... - This is a new path that docker 19.03.14 (with a new version of containerd) uses to avoid containerd CVE issues around the unix socket. See also CVE-2020-15257. * debian/patches/0013-cherry-pick-pr9936.patch: - cherry pick PR#9936 to use all apparmor available (closes: 923500) * d/p/0011-cherry-pick-pr9809, d/p/0012-cherry-pick-pr9844: - dropped, applied upstream Checksums-Sha1: e7ad0a807e1208e76ed8568767a76e5c34087a8e 3535 snapd_2.49-1.dsc 1722701371619404e2a832af12df8c768fb2849c 5032853 snapd_2.49.orig.tar.gz 60400574741b7ed9144a4f891dd3ae9583a371ce 95180 snapd_2.49-1.debian.tar.xz d461763888e39155022118492a3c9890d3a0c562 15940 snapd_2.49-1_source.buildinfo Checksums-Sha256: fe8ff1e17b9faa22d2069c3b44a5e061d38f1024236b1dfd080e6a4d1d1811cb 3535 snapd_2.49-1.dsc 8da73f19017bc129d4ee444c90993445a1748e63d6a3cf5192aac1fa3ecac9f8 5032853 snapd_2.49.orig.tar.gz b20d266cef1aa854f4fd276d6ba0e1776b5749439ac3e76fd2a3874d444c82b4 95180 snapd_2.49-1.debian.tar.xz 17a665b8bf39053c1677b6d54519fe09466831bdb7b832e66dc58745bf851b96 15940 snapd_2.49-1_source.buildinfo Files: 3504eee0076881e803ff0dc9c98e193b 3535 devel optional snapd_2.49-1.dsc 5dbcaccd61d1844434397e5f83222996 5032853 devel optional snapd_2.49.orig.tar.gz 983abe03e6c488a51683a1d4b65d0529 95180 devel optional snapd_2.49-1.debian.tar.xz 14f56b01ac192bbeb11d80b7d4a6b4e7 15940 devel optional snapd_2.49-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE2mxnVNiIdibNBqEomMq7Or1MpZ4FAmA2E74ACgkQmMq7Or1M pZ5VfA//TG+cAZDAOPQ9CufFgwTyk2smujh0jnmzW2gT7E9L1hoVWsGVdMWqnWhE 4TS3Z94jf+r7XUA61mZxDHjexYP1GLEdusJwn2j5slc1Y4O97z/fxmfISqL40J/z ft3YAOBLNqEjCJpScveLfDXmL2eSD//+rHBDWtjNd6w+/7VonRFYwhKM044JnaNe UOF4gU/bryTfts78z3kWPeWIBx2DqG2Z0Bx/SQJa81oYMwmFN6GrJMgtm0tNXH+t 1FMnFBUV99OOKaVUdT2ua+pLu+O8McdZ1J529Km/HYCxEOMeYv2GBCGpJsN5zvUD 9IaCrFG7qGr28rdd7e1VnDA3gvQoRV7zlRHJ/jCzqSVjHmqhyR9k0LAUrzy7Nx6A PW9Y8hL/Hm6Rqq8lFMM1GRArq91lkMEPSliHyO6vz0WO29K/31rXFkOMlURxaJGZ kkF9VlOUyZyzv01Hhmo/C0g48jh+VBkPuvM/WJpL+CCX0WQjmfmRGJfKpeRnI7kb I9ya0NSAYSM9TozNRldCwCuNLCMBADaxgDhiV3d0U+a+mDYBg3oOTFhTZnO5EXGW tZtaEAZc5YZoxXjwrhPFXCqbyn3ipO/fO28pl5yfqF/CoCaQGt+TsAWKE20qisSh y34s8iYgoNtEX4vSv39tlTJli8fu8zLhJ7re+wNdQJU7+ddqZ1I= =6ao7 -----END PGP SIGNATURE-----