USN-5292-1 fixed vulnerabilities in snapd. This update provides the
corresponding update for the riscv64 architecture.
Original advisory details:
James Troup discovered that snap did not properly manage the permissions for
the snap directories. A local attacker could possibly use this issue to expose
sensitive information. (CVE-2021-3155)
Ian Johnson discovered that snapd did not properly validate content interfaces
and layout paths. A local attacker could possibly use this issue to inject
arbitrary AppArmor policy rules, resulting in a bypass of intended access
restrictions. (CVE-2021-4120)
The Qualys Research Team discovered that snapd did not properly validate the
location of the snap-confine binary. A local attacker could possibly use this
issue to execute other arbitrary binaries and escalate privileges.
(CVE-2021-44730)
The Qualys Research Team discovered that a race condition existed in the snapd
snap-confine binary when preparing a private mount namespace for a snap. A
local attacker could possibly use this issue to escalate privileges and
execute arbitrary code. (CVE-2021-44731)
More Stories
firefox-138.0.3-1.fc40
FEDORA-2025-cc8d7b6c6d Packages in this update: firefox-138.0.3-1.fc40 Update description: New upstream update (138.0.3) Update to latest upstream (138.0) Read More
USN-7506-4: Linux kernel (Xenial HWE) vulnerabilities
Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access...
xen-4.19.2-4.fc42
FEDORA-2025-b3d59fca78 Packages in this update: xen-4.19.2-4.fc42 Update description: x86: Indirect Target Selection [XSA-469, CVE-2024-28956] Read More
perl-Mojolicious-9.39-1.fc41
FEDORA-2025-c38fd06bec Packages in this update: perl-Mojolicious-9.39-1.fc41 Update description: Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded...
perl-Mojolicious-9.39-1.fc40
FEDORA-2025-0e7fe5534f Packages in this update: perl-Mojolicious-9.39-1.fc40 Update description: Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded...
znc-1.8.2-16.el8
FEDORA-EPEL-2025-ad4c7abaa9 Packages in this update: znc-1.8.2-16.el8 Update description: CVE-2024-39844 Read More