# CVE-2024-29068: snap-confine: In snapd versions prior to 2.62, snapd failed to properly check the filetype when extracting a snap CVE-2024-29068 is fixed in 9 products on 1 platform, first by golang-github-snapcore-snapd-dev 2.61.4ubuntu0.18.04.1+esm1, released June 30, 2024. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2024-29068 - Priority: Routine - CVSS: 6.6 (Medium) - EPSS: 0.0021 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Mar 13, 2024 ## Description In snapd versions prior to 2.62, snapd failed to properly check the filetype when extracting a snap. The snap format is a squashfs file-systemimage and so can contain files that are non-regular files (such as pipesor sockets etc). Various file entries within the snap squashfs image(such as icons etc) are directly read by snapd when it is extracted. Anattacker who could convince a user to install a malicious snap whichcontained non-regular files at these paths could then cause snapd to blockindefinitely trying to read from such files and cause a denial of service. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | golang-github-snapcore-snapd-dev Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [golang-github-snapcore-snapd-dev 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-golang-github-snapcore-snapd-dev-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | golang-github-snapcore-snapd-dev Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [golang-github-snapcore-snapd-dev 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-golang-github-snapcore-snapd-dev-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | golang-github-snapcore-snapd-dev Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [golang-github-snapcore-snapd-dev 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-golang-github-snapcore-snapd-dev-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | golang-github-snapcore-snapd-dev Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [golang-github-snapcore-snapd-dev 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-golang-github-snapcore-snapd-dev-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | golang-github-ubuntu-core-snappy-dev Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [golang-github-ubuntu-core-snappy-dev 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-golang-github-ubuntu-core-snappy-dev-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | golang-github-ubuntu-core-snappy-dev Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [golang-github-ubuntu-core-snappy-dev 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-golang-github-ubuntu-core-snappy-dev-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | golang-github-ubuntu-core-snappy-dev Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [golang-github-ubuntu-core-snappy-dev 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-golang-github-ubuntu-core-snappy-dev-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | golang-github-ubuntu-core-snappy-dev Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [golang-github-ubuntu-core-snappy-dev 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-golang-github-ubuntu-core-snappy-dev-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snap-confine Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [snap-confine 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-snap-confine-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | snap-confine Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [snap-confine 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-snap-confine-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snap-confine Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [snap-confine 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-snap-confine-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snap-confine Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [snap-confine 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-snap-confine-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snap-confine Ubuntu 24.10 (oracular) | 2.63+24.10 | [snap-confine 2.63+24.10](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-snap-confine-2.63-24.10.md) | Jul 1, 2024 | | Linux | snapd Debian 13.5 (trixie) | 2.62-1 | [DEBIAN-CVE-2024-29068](https://patchblox.com/security/data/fix/linux/debian-cve-2024-29068.md) | Jul 25, 2024 | | Linux | snapd Debian 14 | 2.62-1 | [DEBIAN-CVE-2024-29068](https://patchblox.com/security/data/fix/linux/debian-cve-2024-29068.md) | Jul 25, 2024 | | Linux | snapd Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [snapd 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-snapd-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | snapd Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [snapd 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-snapd-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snapd Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [snapd 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-snapd-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snapd Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [snapd 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-snapd-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snapd Ubuntu 24.10 (oracular) | 2.63+24.10 | [snapd 2.63+24.10](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-snapd-2.63-24.10.md) | Jul 1, 2024 | | Linux | snapd-xdg-open Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [snapd-xdg-open 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-snapd-xdg-open-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | snapd-xdg-open Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [snapd-xdg-open 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-snapd-xdg-open-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snapd-xdg-open Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [snapd-xdg-open 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-snapd-xdg-open-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snapd-xdg-open Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [snapd-xdg-open 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-snapd-xdg-open-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | snapd-xdg-open Ubuntu 24.10 (oracular) | 2.63+24.10 | [snapd-xdg-open 2.63+24.10](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-snapd-xdg-open-2.63-24.10.md) | Jul 1, 2024 | | Linux | ubuntu-core-launcher Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [ubuntu-core-launcher 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ubuntu-core-launcher-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | ubuntu-core-launcher Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [ubuntu-core-launcher 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ubuntu-core-launcher-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-core-launcher Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [ubuntu-core-launcher 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ubuntu-core-launcher-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-core-launcher Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [ubuntu-core-launcher 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-ubuntu-core-launcher-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-core-launcher Ubuntu 24.10 (oracular) | 2.63+24.10 | [ubuntu-core-launcher 2.63+24.10](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-ubuntu-core-launcher-2.63-24.10.md) | Jul 1, 2024 | | Linux | ubuntu-core-snapd-units Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [ubuntu-core-snapd-units 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ubuntu-core-snapd-units-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | ubuntu-core-snapd-units Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [ubuntu-core-snapd-units 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ubuntu-core-snapd-units-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-core-snapd-units Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [ubuntu-core-snapd-units 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ubuntu-core-snapd-units-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-core-snapd-units Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [ubuntu-core-snapd-units 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-ubuntu-core-snapd-units-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-core-snapd-units Ubuntu 24.10 (oracular) | 2.63+24.10 | [ubuntu-core-snapd-units 2.63+24.10](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-ubuntu-core-snapd-units-2.63-24.10.md) | Jul 1, 2024 | | Linux | ubuntu-snappy Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [ubuntu-snappy 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ubuntu-snappy-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | ubuntu-snappy Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [ubuntu-snappy 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ubuntu-snappy-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-snappy Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [ubuntu-snappy 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ubuntu-snappy-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-snappy Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [ubuntu-snappy 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-ubuntu-snappy-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-snappy Ubuntu 24.10 (oracular) | 2.63+24.10 | [ubuntu-snappy 2.63+24.10](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-ubuntu-snappy-2.63-24.10.md) | Jul 1, 2024 | | Linux | ubuntu-snappy-cli Ubuntu 18.04.6 LTS (bionic) | 2.61.4ubuntu0.18.04.1+esm1 | [ubuntu-snappy-cli 2.61.4ubuntu0.18.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ubuntu-snappy-cli-2.61.4ubuntu0.18.04.1-esm1.md) | Jun 30, 2024 | | Linux | ubuntu-snappy-cli Ubuntu 20.04 LTS (focal) | 2.63+20.04ubuntu0.1 | [ubuntu-snappy-cli 2.63+20.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ubuntu-snappy-cli-2.63-20.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-snappy-cli Ubuntu 22.04.1 LTS (jammy) | 2.63+22.04ubuntu0.1 | [ubuntu-snappy-cli 2.63+22.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ubuntu-snappy-cli-2.63-22.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-snappy-cli Ubuntu 24.04.5 LTS (noble) | 2.63+24.04ubuntu0.1 | [ubuntu-snappy-cli 2.63+24.04ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-ubuntu-snappy-cli-2.63-24.04ubuntu0.1.md) | Jun 30, 2024 | | Linux | ubuntu-snappy-cli Ubuntu 24.10 (oracular) | 2.63+24.10 | [ubuntu-snappy-cli 2.63+24.10](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-ubuntu-snappy-cli-2.63-24.10.md) | Jul 1, 2024 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo