{"action":"Upgrade snapd to 2.62-1 or later.","affected":[{"fixed":"2.62-1","introduced":"0"}],"component":"snapd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.62-1"],"id":"tcs_01M5NKDZCJDR365QC1RA2CNQ45","modified_at":"2026-11-02T12:02:04.729545180Z","published_at":"2024-07-25T20:15:04.280Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-29068","https://security-tracker.debian.org/tracker/CVE-2024-29068"],"severity":{"label":"medium","score":6.6},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-29068#Debian:14/snapd","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-29068"}],"summary":"In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular file"}