security release for core snap: 2.61.4

NEWS.md

@@ -1,3 +1,9 @@
+# New in snapd 2.61.4:
+* Fix not checking file type when extracting a snap
+* Fix not checking destination of symbolic link when extracting a snap
+* Fix unexpected mount points in /var/lib/snapd/hostfs on the initial mount namespace
+* home interface: deny creation of $HOME/bin
+
 # New in snapd 2.61.3:
 * Install systemd files in correct location for 24.04
 

packaging/arch/PKGBUILD

@@ -11,7 +11,7 @@ pkgdesc="Service and tools for management of snap packages."
 depends=('squashfs-tools' 'libseccomp' 'libsystemd' 'apparmor')
 optdepends=('bash-completion: bash completion support'
             'xdg-desktop-portal: desktop integration')
-pkgver=2.61.3
+pkgver=2.61.4
 pkgrel=1
 arch=('x86_64' 'i686' 'armv7h' 'aarch64')
 url="https://github.com/snapcore/snapd"

packaging/debian-sid/changelog

@@ -1,3 +1,15 @@
+snapd (2.61.4-1) unstable; urgency=medium
+
+  * New upstream release, LP: #2024007
+    - Fix not checking file type when extracting a snap
+    - Fix not checking destination of symbolic link when extracting a
+      snap
+    - Fix unexpected mount points in /var/lib/snapd/hostfs on the
+      initial mount namespace
+    - home interface: deny creation of $HOME/bin
+
+ -- Ernest Lotter <[email protected]>  Wed, 05 Jun 2024 00:58:39 +0200
+
 snapd (2.61.3-1) unstable; urgency=medium
 
   * New upstream release, LP: #2039017

packaging/fedora/snapd.spec

@@ -102,7 +102,7 @@
 %endif
 
 Name:           snapd
-Version:        2.61.3
+Version:        2.61.4
 Release:        0%{?dist}
 Summary:        A transactional software package manager
 License:        GPLv3
@@ -991,6 +991,15 @@ fi
 
 
 %changelog
+* Wed Jun 05 2024 Ernest Lotter <[email protected]>
+- New upstream release 2.61.4
+ - Fix not checking file type when extracting a snap
+ - Fix not checking destination of symbolic link when extracting a
+   snap
+ - Fix unexpected mount points in /var/lib/snapd/hostfs on the
+   initial mount namespace
+ - home interface: deny creation of $HOME/bin
+
 * Wed Mar 06 2024 Ernest Lotter <[email protected]>
 - New upstream release 2.61.3
  - Install systemd files in correct location for 24.04

packaging/opensuse/snapd.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Jun 04 22:58:39 UTC 2024 - [email protected]
+
+- Update to upstream release 2.61.4
+
 -------------------------------------------------------------------
 Wed Mar 06 21:18:11 UTC 2024 - [email protected]
 

packaging/opensuse/snapd.spec

@@ -82,7 +82,7 @@
 
 
 Name:           snapd
-Version:        2.61.3
+Version:        2.61.4
 Release:        0
 Summary:        Tools enabling systems to work with .snap files
 License:        GPL-3.0

packaging/ubuntu-14.04/changelog

@@ -1,3 +1,15 @@
+snapd (2.61.4~14.04) trusty; urgency=medium
+
+  * New upstream release, LP: #2024007
+    - Fix not checking file type when extracting a snap
+    - Fix not checking destination of symbolic link when extracting a
+      snap
+    - Fix unexpected mount points in /var/lib/snapd/hostfs on the
+      initial mount namespace
+    - home interface: deny creation of $HOME/bin
+
+ -- Ernest Lotter <[email protected]>  Wed, 05 Jun 2024 00:58:39 +0200
+
 snapd (2.61.3~14.04) trusty; urgency=medium
 
   * New upstream release, LP: #2039017

packaging/ubuntu-16.04/changelog

@@ -1,3 +1,15 @@
+snapd (2.61.4) xenial; urgency=medium
+
+  * New upstream release, LP: #2024007
+    - Fix not checking file type when extracting a snap
+    - Fix not checking destination of symbolic link when extracting a
+      snap
+    - Fix unexpected mount points in /var/lib/snapd/hostfs on the
+      initial mount namespace
+    - home interface: deny creation of $HOME/bin
+
+ -- Ernest Lotter <[email protected]>  Wed, 05 Jun 2024 00:58:39 +0200
+
 snapd (2.61.3) xenial; urgency=medium
 
   * New upstream release, LP: #2039017