[Bug 1195880] New: VUL-0: firejail: private-cwd leaks access to the entire filesystem
http://bugzilla.opensuse.org/show_bug.cgi?id=1195880 Bug ID: 1195880 Summary: VUL-0: firejail: private-cwd leaks access to the entire filesystem Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: sebix+novell.com@sebix.at Reporter: Andreas.Stieger@gmx.de QA Contact: security-team@suse.de Found By: Security Response Team Blocker: --- It was discovered in firejail before 0.9.68 private-cwd may leak access to the entire file system firejail --private --private-cwd=. /usr/bin/sh References: https://github.com/netblue30/firejail/issues/4780 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1195880 http://bugzilla.opensuse.org/show_bug.cgi?id=1195880#c1 Sebastian Wagner <sebix+novell.com@sebix.at> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |sebix+novell.com@sebix.at --- Comment #1 from Sebastian Wagner <sebix+novell.com@sebix.at> --- Leap 15.3: https://build.opensuse.org/request/show/954100 TW: https://build.opensuse.org/request/show/954101 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1195880 http://bugzilla.opensuse.org/show_bug.cgi?id=1195880#c2 --- Comment #2 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1195880) was mentioned in https://build.opensuse.org/request/show/954102 Backports:SLE-15-SP3 / firejail -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1195880 http://bugzilla.opensuse.org/show_bug.cgi?id=1195880#c4 Sebastian Wagner <sebix+novell.com@sebix.at> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Sebastian Wagner <sebix+novell.com@sebix.at> --- This bug was fixed with the patches/requests mentioned above. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com