{"id":34343,"date":"2022-12-02T19:04:05","date_gmt":"2022-12-02T16:04:05","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/170077\/dsa-5292-1.txt"},"modified":"2022-12-03T08:35:35","modified_gmt":"2022-12-03T05:05:35","slug":"debian-security-advisory-5292-1-snapd","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/debian-security-advisory-5292-1-snapd\/","title":{"rendered":"Debian Security Advisory 5292-1 snapd"},"content":{"rendered":"<p dir=\"ltr\">&#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211;<br \/>\nHash: SHA512<\/p>\n<p dir=\"ltr\">&#8211; &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nDebian Security Advisory DSA-5292-1 security@debian.org<br \/>\nhttps:\/\/www.debian.org\/security\/ Moritz Muehlenhoff<br \/>\nDecember 01, 2022 https:\/\/www.debian.org\/security\/faq<br \/>\n&#8211; &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/p>\n<p dir=\"ltr\">Package : snapd<br \/>\nCVE ID : CVE-2022-3328<\/p>\n<p dir=\"ltr\">The Qualys Research Team discovered a race condition in the snapd-confine<br \/>\nbinary which could result in local privilege escalation.<\/p>\n<p dir=\"ltr\">For the stable distribution (bullseye), this problem has been fixed in<br \/>\nversion 2.49-1+deb11u2.<\/p>\n<p dir=\"ltr\">We recommend that you upgrade your snapd packages.<\/p>\n<p dir=\"ltr\">For the detailed security status of snapd please refer to<br \/>\nits security tracker page at:<br \/>\nhttps:\/\/security-tracker.debian.org\/tracker\/snapd<\/p>\n<p dir=\"ltr\">Further information about Debian Security Advisories, how to apply<br \/>\nthese updates to your system and frequently asked questions can be<br \/>\nfound at: https:\/\/www.debian.org\/security\/<\/p>\n<p dir=\"ltr\">Mailing list: debian-security-announce@lists.debian.org<br \/>\n&#8212;&#8211;BEGIN PGP SIGNATURE&#8212;&#8211;<\/p>\n<p dir=\"ltr\">iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmOI8+AACgkQEMKTtsN8<br \/>\nTjZr3w\/\/QGYaaKqtRpQzsy0cvNSSkZSL5wfnmZM63QLjZ0ilf3xvqI8Qfr440PX1<br \/>\nuXVkrGq1GsfZNJvf7m6A6SpNRNAxuTSIND4JF2oxEq9VXwXCieernAnflpj5xjUq<br \/>\ncv+s0r0t1LsO6TGCesiNyZl2vqcOouEfVZd3EqweXVhyrPZlS1JlJrX9qTAW9noA<br \/>\n4QfMbsQITwVZu9liWeCwXnEkqjZ6oGo9qxkG36+1+BGdCuL1+c2h+zwjOhKm+c5p<br \/>\n1nq7hcEdrxDJWs2jkxoZz7PaVpe52xcFfALuXJ71wjwm7M2v9Is91oMYSmtfp1vs<br \/>\ncgoUxSfsZBlzK+zncjg571S+QHR\/OwH6qnAmbol7gGsXgMhAQ9bkqBJQNH8V17h9<br \/>\n+ACUuBz5Y4+9xSLiFuwtycMD3egRp9SPPQ3QoicgiRwL4MZbAPst9sbTafrRV2EL<br \/>\n0rM6b81WhTMtlWHLtNo3urIocU5E\/1oK5XY\/jxjGnZN1+sgk1W63tG8xBI7ikYo8<br \/>\n9\/HL1Oa\/1zCeH860aCcbabMVvFnqpaw6KkWZxCT5ty5o6obYO\/cv+CVGYLKbp2JX<br \/>\nVUGVb0KyO5ATMhLuPdpgwgimLrn9V2xDmWOtzuNlSwtBDh2fM9X2F0VSv7pdM74j<br \/>\nQcl459LD3Vz2Oho8LLRIjPLOgZzJbO3g6BqGcEdJj1pYglz65MI=CYJH<br \/>\n&#8212;&#8211;END PGP SIGNATURE&#8212;&#8211;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211; Hash: SHA512 &#8211; &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;- Debian Security Advisory DSA-5292-1 security@debian.org https:\/\/www.debian.org\/security\/ Moritz Muehlenhoff December 01, 2022 https:\/\/www.debian.org\/security\/faq &#8211; &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;- Package : snapd CVE ID : CVE-2022-3328 The Qualys Research Team discovered a race condition in the snapd-confine binary which could result in local privilege escalation. For the stable distribution (bullseye), this problem &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-34343","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=34343"}],"version-history":[{"count":2,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34343\/revisions"}],"predecessor-version":[{"id":34375,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34343\/revisions\/34375"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=34343"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=34343"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=34343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}