tocsin

Debian/snapd: critical 9.8

Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.

Action: Upgrade snapd to 2.37.1-1 or later.

Affected

introducedfixedlast affected
02.37.1-1-

Fixed versions

2.37.1-1

Sources

published · modified · JSON