Hello snapcrafters! The Snapcraft team announces version 4.4.4.
New in this release:
Exclude current directory from
Earlier releases of Snapcraft included the current directory when configuring
LD_LIBRARY_PATH for application commands. This could have unintended consequences for strict mode snaps under certain circumstances. (CVE-2020-27348, https://usn.ubuntu.com/4661-1/)
This new Snapcraft releases ensure that
LD_LIBRARY_PATH no longer contains the current directory and simply rebuilding the snap with the newer Snapcraft will resolve the issue. While this change should be safe for the majority of snaps, snaps that relied on the previous behavior may behave differently (eg, if the snap changes into a directory with libraries that weren’t already covered by other parts of
LD_LIBRARY_PATH). If your snap relies on the previous behavior, simply adjust
LD_LIBRARY_PATH to include all the required directories your application needs.