Symbolic Link Privilege Escalation

github.com/snapcore/snapd is vulnerable to Symbolic Link Privilege Escalation. The vulnerability is due improper symbolic link destinations path checks during snap extraction, which allows an attacker to cause snapd to write contents to a world-readable directory and potentially expose privileged information.