ROS-20220304-01

Vulnerability in snapd’s snap packet management daemon, related to insufficient validation of interface
snapd content and layout paths. Exploitation of the vulnerability could allow an attacker to enforce
arbitrary AppArmor policy rules through a corrupted content interface and layout declarations and
execute arbitrary code with elevated privileges

Vulnerability in the snapd snap package management daemon, related to the race condition in the binary
snap-confine when preparing a private mount namespace. Exploitation of the vulnerability could
allow an attacker to bind their own content within the snap private mount namespace
and execute arbitrary code with root privileges

The vulnerability in the snapd package management daemon, snapd, is due to hard linking errors in the binary file
snap-confine. Exploitation of the vulnerability could allow an attacker to create a hard link to system
binaries and execute them with elevated privileges