snapd 2.48.3+20.04 source package in Ubuntu

Changelog

snapd (2.48.3+20.04) focal-security; urgency=medium

  * SECURITY UPDATE: sandbox escape vulnerability for containers
    (LP: #1910456)
    - many: add Delegate=true to generated systemd units for special
      interfaces
    - interfaces/greengrass-support: back-port interface changes to
      2.48
    - CVE-2020-27352
  * interfaces/builtin/docker-support: allow /run/containerd/s/...
    - This is a new path that docker 19.03.14 (with a new version of
      containerd) uses to avoid containerd CVE issues around the unix
      socket. See also CVE-2020-15257.

snapd (2.48.2) xenial; urgency=medium

  * New upstream release, LP: #1906690
    - tests: sign new nested-18|20* models to allow for generic serials
    - secboot: add extra paranoia when waiting for that fde-reveal-key
    - tests: backport netplan workarounds from #9785
    - secboot: add workaround for snapcore/core-initrd issue #13
    - devicestate: log checkEncryption errors via logger.Noticef
    - tests: add nested spread end-to-end test for fde-hooks
    - devicestate: implement checkFDEFeatures()
    - boot: tweak resealing with fde-setup hooks
    - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud-
      init restrict file
    - secboot: add new LockSealedKeys() that uses either TPM or
      fde-reveal-key
    - gadget: use "sealed-keys" to determine what method to use for
      reseal
    - boot: add sealKeyToModeenvUsingFdeSetupHook()
    - secboot: use `fde-reveal-key` if available to unseal key
    - cmd/snap-update-ns: fix sorting of overname mount entries wrt
      other entries
    - o/devicestate: save model with serial in the device save db
    - devicestate: add runFDESetupHook() helper
    - secboot,devicestate: add scaffoling for "fde-reveal-key" support
    - hookstate: add new HookManager.EphemeralRunHook()
    - update-pot: fix typo in plural keyword spec
    - store,cmd/snap-repair: increase initial expontential time
      intervals
    - o/devicestate,daemon: fix reboot system action to not require a
      system label
    - github: run nested suite when commit is pushed to release branch
    - tests: reset fakestore unit status
    - tests: fix uc20-create-parition-* tests for updated gadget
    - hookstate: implement snapctl fde-setup-{request,result}
    - devicestate: make checkEncryption fde-setup hook aware
    - client,snapctl: add naive support for "stdin"
    - devicestate: support "storage-safety" defaults during install
    - snap: use the boot-base for kernel hooks
    - vendor: update secboot repo to avoid including secboot.test binary

snapd (2.48.1) xenial; urgency=medium

  * New upstream release, LP: #1906690
    - gadget: disable ubuntu-boot role validation check

 -- Michael Vogt <email address hidden>  Tue, 02 Feb 2021 09:21:12 +0100

Upload details

Uploaded by:
Michael Vogt
Sponsored by:
Alex Murray
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
snapd_2.48.3+20.04.tar.xz 3.6 MiB 0164e4271d809b9560753e3bb5719a973d0e0c08f05c4b39423e1a440a01ff69
snapd_2.48.3+20.04.dsc 2.5 KiB c8fdb6074ad45a1a7b9026c239be4e76deaadf42c1adac9750bf0ae890997d33

View changes file

Binary packages built by this source

golang-github-snapcore-snapd-dev: snappy development go packages.

 Use these to use the snappy API.

golang-github-ubuntu-core-snappy-dev: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

snap-confine: Transitional package for snapd

 This is a transitional dummy package. It can safely be removed.

snapd: Daemon and tooling that enable snap packages

 Install, configure, refresh and remove snap packages. Snaps are
 'universal' packages that work across many different Linux systems,
 enabling secure distribution of the latest apps and utilities for
 cloud, servers, desktops and the internet of things.
 .
 Start with 'snap list' to see installed snaps.

snapd-dbgsym: debug symbols for snapd
snapd-xdg-open: Transitional package for snapd-xdg-open

 This is a transitional dummy package. It can safely be removed.

ubuntu-core-launcher: Transitional package for snapd

 This is a transitional dummy package. It can safely be removed.

ubuntu-core-snapd-units: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

ubuntu-snappy: transitional dummy package

 This is a transitional dummy package. It can safely be removed.

ubuntu-snappy-cli: transitional dummy package

 This is a transitional dummy package. It can safely be removed.