CVE-2019-11503

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the...

Original description

The description as published by the source.

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd restore permission bypass."

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-11503 snapd Fixed in: 2.40-1

References

advisory openwall.com
advisory github.com
patch openwall.com
web lists.fedoraproject.org
web lists.fedoraproject.org