⬇ Download holy card: ·
⚔ Commemorated today: Winter Darkness in Ukraine (2015)Saint Oh Snap! More Lemmings, Who Mounted His Own Way to Root
Patron of Ubuntu snaps, private mount namespaces, and anyone who trusts every confined package.
Life
On 23 December 2022 Vulnerability Garden marks the flaw Qualys had disclosed in February: a race in the snap-confine binary, which prepares the private mount namespace for each snap. A local attacker could bind-mount their own contents inside that namespace and make snap-confine run arbitrary code, gaining root privileges on default Ubuntu installations. Fixed in snapd 2.54.3.
Prayer
O Saint Oh Snap! More Lemmings, who slips your mount where the system trusts, let our boundaries hold even under a race. Amen.
How to celebrate
Celebrated by updating snapd to 2.54.3 and remembering that even a sandbox has thin walls.
Jump like a lemming, land like root.