Debian/snapd: high 7.5
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's acces
Action: Upgrade snapd to 2.30-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.30-1 | - |
Fixed versions
| 2.30-1 |
Sources
published · modified · JSON