PyPI/snapcraft CVE-2020-27348: unknown, EPSS 0.70%
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plu
Action: Upgrade snapcraft to 2.43.1 or later.
pip install snapcraft==2.43.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.43.1 | - |
Fixed versions
| 2.43.1 |
Sources
- osv: PYSEC-2020-109
- https://usn.ubuntu.com/usn/usn-4661-1
- https://github.com/snapcore/snapcraft/pull/3345
- https://bugs.launchpad.net/bugs/1901572
- https://github.com/advisories/GHSA-qxm5-vx5j-pp6w
CVE-2020-27348 · published · modified · JSON