Go/github.com/snapcore/snapd CVE-2024-5138: medium 4, EPSS 0.83%

CVE-2024-5138: snapd snapctl auth bypass

Action: Upgrade github.com/snapcore/snapd to 0.0.0-20240524114846-68ee9c6aa916 or later.

go get github.com/snapcore/snapd@v2.63.1

go get github.com/snapcore/snapd@v0.0.0-20240524114846-68ee9c6aa916

Affected

Fixed versions

Sources

• osv: GHSA-p9v8-q5m4-pf46
• https://github.com/canonical/snapd/security/advisories/GHSA-p9v8-q5m4-pf46
• https://github.com/canonical/snapd/commit/68ee9c6aa916ab87dbfd9a26030690f2cabf1e14
• https://bugs.launchpad.net/snapd/+bug/2065077
• https://github.com/canonical/snapd
• https://ubuntu.com/security/CVE-2024-5138
• https://www.cve.org/CVERecord?id=CVE-2024-5138

CVE-2024-5138 · published 2025-01-16T17:19:07Z · modified 2026-07-08T07:14:03.911841367Z · JSON