flar

flar FLAR은 Fast Light Agent Restrictor입니다. 이는 gars라는 바위 위에서 동작합니다. Go로 작성된 간단하고 가벼운 CLI 도구로, Claude Code, Antigravity, Codex, Copilot, Reasonix와 같은 코딩 에이전트 CLI를 격리된 Bubblewrap bwrap 샌드박스 안에서 안전하게 실행합니다. 목적은 복잡한 설정 없이 즉시 AI 에이전트를 bubblewrap하여 현재 작업 중인 프로젝트에만 접근할 수 있도록 제한하는 것입니다. 이는 프롬프트 인젝션 공격과...

bubblewrap

Bubblewrap systemd-nspawn、docker などの多くのコンテナランタイムツールは、システム管理者やオーケストレーションツール例: Kubernetesがコンテナを実行するためのインフラストラクチャを提供することに焦点を当てています。 これらのツールは、特権のないユーザーに渡すのには適していません。なぜなら、そのようなアクセスをホスト上の完全に特権化されたrootシェルに変えるのは簡単だからです。 ユーザー名前空間 Linuxカーネルには、特権のないユーザーがコンテナ機能を使用できるようにする ユーザー名前空間...

Cordon

Cordon ⚠️ 프로젝트 중단 이 프로젝트의 개발이 중단되었습니다. 다른 누군가가 같은 아이디어를 가지고 더 나은 솔루션을 구축했기 때문입니다. 다음을 확인하시길 적극 권장합니다:Use-Tusk의 Fence. 참고: 이 저장소는 원래FOSS HACK 2026 을 위해 생성되었으나, 불행히도 기한 내에 완료하지 못했습니다. 그러나 Hackathena '26 에서 유사한 프로젝트를 구축하여 3등상을 수상했습니다! 관심이 있으시다면 다음 저장소를 확인해주세요:A56-A5/lion. Cordon은 Linux에서 제한된 파일 시스템 보...

Rocky Linux 9.4 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (ciqsa-2026_0521)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260521 advisory. This advisory aggregates security fixes for the bubblewrap SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding descriptio...

AlmaLinux 9.2 [TuxCare] Security Update: bubblewrap (ALMALINUX9.2:CLSA-2025:1741125454)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1741125454 advisory. - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised...

Rocky Linux 9.2 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (ciqsa-2026_0397)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260397 advisory. This advisory aggregates security fixes for the bubblewrap SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding descriptio...

Rocky Linux 8.6 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (ciqsa-2026_0013)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260013 advisory. This advisory aggregates security fixes for the bubblewrap SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding descriptio...

Rocky Linux 8.8 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (ciqsa-2026_0329)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260329 advisory. This advisory aggregates security fixes for the bubblewrap SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding descriptio...

Amazon Linux 2023 : bubblewrap (ALAS2023-2026-3105)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3105 advisory. A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the...

TencentOS Server 4: bubblewrap (TSSA-2026:1022)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1022 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

USN-8779-2: Bubblewrap regression

USN-8779-1 fixed vulnerabilities in Bubblewrap. Unfortunately, the fix for CVE-2026-87766 introduced a regression in symlink resolution, preventing certain Flatpak applications from launching. This update reverts that fix until a complete fix is available. We apologize for the inconvenience...

CVE-2026-87766 affecting package bubblewrap for versions less than 0.12.0-1

CVE-2026-87766 affecting package bubblewrap for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : Bubblewrap vulnerabilities (USN-8779-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8779-1 advisory. It was discovered that Bubblewrap incorrectly handled certain...

USN-8779-1 bubblewrap vulnerabilities

It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2019-12439 It was discovered that Bubblewrap incorrectly handl...

USN-8779-1: Bubblewrap vulnerabilities

It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2019-12439 It was discovered that Bubblewrap incorrectly handl...

Astra Linux – Vulnerability in Flatpak

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak application could execute arbitrary code outside its sandbox. Normally, the --command argument of flatpak...

DEBIAN-CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

AZL-100908 CVE-2026-87766 affecting package bubblewrap for versions less than 0.12.0-1

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...