New subject: [Bug 1195880] VUL-0: firejail: private-cwd leaks access to the entire filesystem

13 Feb 2022

      http://bugzilla.opensuse.org/show_bug.cgi?id=1195880

            Bug ID: 1195880
           Summary: VUL-0: firejail: private-cwd leaks access to the
                    entire filesystem
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: sebix+novell.com@sebix.at
          Reporter: Andreas.Stieger@gmx.de
        QA Contact: security-team@suse.de
          Found By: Security Response Team
           Blocker: ---

It was discovered in firejail before 0.9.68 private-cwd may leak access to the
entire file system

firejail --private --private-cwd=. /usr/bin/sh 

References:
https://github.com/netblue30/firejail/issues/4780

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1195880] New: VUL-0: firejail: private-cwd leaks access to the entire filesystem

bugzilla_noreply＠suse.com

bugzilla_noreply＠suse.com

bugzilla_noreply＠suse.com

bugzilla_noreply＠suse.com

tags

participants (1)