Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2019-11503 →

DEBIAN-CVE-2019-11503

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd restore permission bypass."

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 snapd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-1"}]}]

Debian:13 snapd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-1"}]}]

Debian:14 snapd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-1"}]}]

Références

advisory security-tracker.debian.org