Ubuntu alert USN-8579-1 (snapd)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8579-1] snapd vulnerabilities
Date:
             
 
Tue, 21 Jul 2026 17:34:02 +0000
Message-ID:
             
 
<E1wmELy-0008SK-Ga@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8579-1
July 21, 2026

snapd vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in snapd.

Software Description:
- snapd: Daemon and tooling that enable snap packages

Details:

James Henstridge discovered that snapd's default apparmor template did
not restrict access to systemd-userdbd varlink interface. A local
attacker could possibly use this issue to obtain sensitive information.
(CVE-2024-5300)

Qualys discovered that snap-confine can be tricked to create
attacker-controlled files at certain privileged locations. A local
attacker could possibly use this issue to bypass intended restrictions
and escalate privileges to root. This issue only affected
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.
(CVE-2026-8933)

Zygmunt Krynicki discovered that snapd's default seccomp template
did not restrict the creation of executables with the set-user-ID
attribute. A local attacker could possibly use this issue to create
and execute setuid binaries. (CVE-2026-15226)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  snapd                           2.76+ubuntu26.04.3

Ubuntu 24.04 LTS
  snapd                           2.76+ubuntu24.04.1

Ubuntu 22.04 LTS
  snapd                           2.76+ubuntu22.04.1

Ubuntu 20.04 LTS
  snapd                           2.67.1+20.04ubuntu1~esm3
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  snapd                           2.61.4ubuntu0.18.04.1+esm4
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  snapd                           2.61.4ubuntu0.16.04.1+esm4
                                  Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8579-1
  CVE-2024-5300, CVE-2026-15226, CVE-2026-8933

Package Information:
  https://launchpad.net/ubuntu/+source/snapd/2.76+ubuntu26....
  https://launchpad.net/ubuntu/+source/snapd/2.76+ubuntu24....
  https://launchpad.net/ubuntu/+source/snapd/2.76+ubuntu22....


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=hhhb
-----END PGP SIGNATURE-----