From 325a831d5be737ae4bda3d860fbba0f63ce87535 Mon Sep 17 00:00:00 2001 From: ernestl Date: Wed, 5 Jun 2024 00:59:28 +0200 Subject: [PATCH] security release for core snap: 2.61.4 --- NEWS.md | 6 ++++++ packaging/arch/PKGBUILD | 2 +- packaging/debian-sid/changelog | 12 ++++++++++++ packaging/fedora/snapd.spec | 11 ++++++++++- packaging/opensuse/snapd.changes | 5 +++++ packaging/opensuse/snapd.spec | 2 +- packaging/ubuntu-14.04/changelog | 12 ++++++++++++ packaging/ubuntu-16.04/changelog | 12 ++++++++++++ 8 files changed, 59 insertions(+), 3 deletions(-) diff --git a/NEWS.md b/NEWS.md index 94c75eccc4e..23b2295fd7a 100644 --- a/NEWS.md +++ b/NEWS.md @@ -1,3 +1,9 @@ +# New in snapd 2.61.4: +* Fix not checking file type when extracting a snap +* Fix not checking destination of symbolic link when extracting a snap +* Fix unexpected mount points in /var/lib/snapd/hostfs on the initial mount namespace +* home interface: deny creation of $HOME/bin + # New in snapd 2.61.3: * Install systemd files in correct location for 24.04 diff --git a/packaging/arch/PKGBUILD b/packaging/arch/PKGBUILD index 42b06a37a30..09614e48b05 100644 --- a/packaging/arch/PKGBUILD +++ b/packaging/arch/PKGBUILD @@ -11,7 +11,7 @@ pkgdesc="Service and tools for management of snap packages." depends=('squashfs-tools' 'libseccomp' 'libsystemd' 'apparmor') optdepends=('bash-completion: bash completion support' 'xdg-desktop-portal: desktop integration') -pkgver=2.61.3 +pkgver=2.61.4 pkgrel=1 arch=('x86_64' 'i686' 'armv7h' 'aarch64') url="https://github.com/snapcore/snapd" diff --git a/packaging/debian-sid/changelog b/packaging/debian-sid/changelog index 3823c908872..eee735d579a 100644 --- a/packaging/debian-sid/changelog +++ b/packaging/debian-sid/changelog @@ -1,3 +1,15 @@ +snapd (2.61.4-1) unstable; urgency=medium + + * New upstream release, LP: #2024007 + - Fix not checking file type when extracting a snap + - Fix not checking destination of symbolic link when extracting a + snap + - Fix unexpected mount points in /var/lib/snapd/hostfs on the + initial mount namespace + - home interface: deny creation of $HOME/bin + + -- Ernest Lotter Wed, 05 Jun 2024 00:58:39 +0200 + snapd (2.61.3-1) unstable; urgency=medium * New upstream release, LP: #2039017 diff --git a/packaging/fedora/snapd.spec b/packaging/fedora/snapd.spec index cac6fb1796f..12f98a0d18a 100644 --- a/packaging/fedora/snapd.spec +++ b/packaging/fedora/snapd.spec @@ -102,7 +102,7 @@ %endif Name: snapd -Version: 2.61.3 +Version: 2.61.4 Release: 0%{?dist} Summary: A transactional software package manager License: GPLv3 @@ -991,6 +991,15 @@ fi %changelog +* Wed Jun 05 2024 Ernest Lotter +- New upstream release 2.61.4 + - Fix not checking file type when extracting a snap + - Fix not checking destination of symbolic link when extracting a + snap + - Fix unexpected mount points in /var/lib/snapd/hostfs on the + initial mount namespace + - home interface: deny creation of $HOME/bin + * Wed Mar 06 2024 Ernest Lotter - New upstream release 2.61.3 - Install systemd files in correct location for 24.04 diff --git a/packaging/opensuse/snapd.changes b/packaging/opensuse/snapd.changes index 23060ab4ca0..fc950ae83e3 100644 --- a/packaging/opensuse/snapd.changes +++ b/packaging/opensuse/snapd.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Tue Jun 04 22:58:39 UTC 2024 - ernest.lotter@canonical.com + +- Update to upstream release 2.61.4 + ------------------------------------------------------------------- Wed Mar 06 21:18:11 UTC 2024 - ernest.lotter@canonical.com diff --git a/packaging/opensuse/snapd.spec b/packaging/opensuse/snapd.spec index 7b552c18fd1..7b2e5e048c8 100644 --- a/packaging/opensuse/snapd.spec +++ b/packaging/opensuse/snapd.spec @@ -82,7 +82,7 @@ Name: snapd -Version: 2.61.3 +Version: 2.61.4 Release: 0 Summary: Tools enabling systems to work with .snap files License: GPL-3.0 diff --git a/packaging/ubuntu-14.04/changelog b/packaging/ubuntu-14.04/changelog index a56fc627b36..af7aae671cb 100644 --- a/packaging/ubuntu-14.04/changelog +++ b/packaging/ubuntu-14.04/changelog @@ -1,3 +1,15 @@ +snapd (2.61.4~14.04) trusty; urgency=medium + + * New upstream release, LP: #2024007 + - Fix not checking file type when extracting a snap + - Fix not checking destination of symbolic link when extracting a + snap + - Fix unexpected mount points in /var/lib/snapd/hostfs on the + initial mount namespace + - home interface: deny creation of $HOME/bin + + -- Ernest Lotter Wed, 05 Jun 2024 00:58:39 +0200 + snapd (2.61.3~14.04) trusty; urgency=medium * New upstream release, LP: #2039017 diff --git a/packaging/ubuntu-16.04/changelog b/packaging/ubuntu-16.04/changelog index 2c1f72fe796..dacc2eb1862 100644 --- a/packaging/ubuntu-16.04/changelog +++ b/packaging/ubuntu-16.04/changelog @@ -1,3 +1,15 @@ +snapd (2.61.4) xenial; urgency=medium + + * New upstream release, LP: #2024007 + - Fix not checking file type when extracting a snap + - Fix not checking destination of symbolic link when extracting a + snap + - Fix unexpected mount points in /var/lib/snapd/hostfs on the + initial mount namespace + - home interface: deny creation of $HOME/bin + + -- Ernest Lotter Wed, 05 Jun 2024 00:58:39 +0200 + snapd (2.61.3) xenial; urgency=medium * New upstream release, LP: #2039017