release: 2.59.5

Author: mvo5

NEWS.md

@@ -1,3 +1,7 @@
+# New in snapd 2.59.5:
+* Explicitly disallow the use of ioctl + TIOCLINUX
+  This fixes CVE-2023-1523.
+
 # New in snapd 2.59.4:
 * Retry when looking for disk label on non-UEFI systems
 * Fix remodel from UC20 to UC22

packaging/arch/PKGBUILD

@@ -11,7 +11,7 @@ pkgdesc="Service and tools for management of snap packages."
 depends=('squashfs-tools' 'libseccomp' 'libsystemd' 'apparmor')
 optdepends=('bash-completion: bash completion support'
             'xdg-desktop-portal: desktop integration')
-pkgver=2.59.4
+pkgver=2.59.5
 pkgrel=1
 arch=('x86_64' 'i686' 'armv7h' 'aarch64')
 url="https://github.com/snapcore/snapd"

packaging/debian-sid/changelog

@@ -1,3 +1,11 @@
+snapd (2.59.5-1) unstable; urgency=medium
+
+  * New upstream release, LP: #2009946
+    - Explicitly disallow the use of ioctl + TIOCLINUX
+      This fixes CVE-2023-1523.
+
+ -- Michael Vogt <[email protected]>  Sat, 27 May 2023 09:44:43 +0200
+
 snapd (2.59.4-1) unstable; urgency=medium
 
   * New upstream release, LP: #2009946

packaging/fedora/snapd.spec

@@ -102,7 +102,7 @@
 %endif
 
 Name:           snapd
-Version:        2.59.4
+Version:        2.59.5
 Release:        0%{?dist}
 Summary:        A transactional software package manager
 License:        GPLv3
@@ -996,6 +996,11 @@ fi
 
 
 %changelog
+* Sat May 27 2023 Michael Vogt <[email protected]>
+- New upstream release 2.59.5
+ - Explicitly disallow the use of ioctl + TIOCLINUX
+   This fixes CVE-2023-1523.
+
 * Fri May 12 2023 Michael Vogt <[email protected]>
 - New upstream release 2.59.4
  - Retry when looking for disk label on non-UEFI systems

packaging/opensuse/snapd.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Sat May 27 07:44:43 UTC 2023 - [email protected]
+
+- Update to upstream release 2.59.5
+
 -------------------------------------------------------------------
 Fri May 12 08:15:57 UTC 2023 - [email protected]
 

packaging/opensuse/snapd.spec

@@ -82,7 +82,7 @@
 
 
 Name:           snapd
-Version:        2.59.4
+Version:        2.59.5
 Release:        0
 Summary:        Tools enabling systems to work with .snap files
 License:        GPL-3.0

packaging/ubuntu-14.04/changelog

@@ -1,3 +1,11 @@
+snapd (2.59.5~14.04) trusty; urgency=medium
+
+  * New upstream release, LP: #2009946
+    - Explicitly disallow the use of ioctl + TIOCLINUX
+      This fixes CVE-2023-1523.
+
+ -- Michael Vogt <[email protected]>  Sat, 27 May 2023 09:44:43 +0200
+
 snapd (2.59.4~14.04) trusty; urgency=medium
 
   * New upstream release, LP: #2009946

packaging/ubuntu-16.04/changelog

@@ -1,3 +1,11 @@
+snapd (2.59.5) xenial; urgency=medium
+
+  * New upstream release, LP: #2009946
+    - Explicitly disallow the use of ioctl + TIOCLINUX
+      This fixes CVE-2023-1523.
+
+ -- Michael Vogt <[email protected]>  Sat, 27 May 2023 09:44:43 +0200
+
 snapd (2.59.4) xenial; urgency=medium
 
   * New upstream release, LP: #2009946