332 matches found
SUSE CVE-2019-12589
In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter has been modified by an attacker...
SUSE CVE-2020-17367
Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection...
SUSE CVE-2020-17368
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection...
SUSE CVE-2021-26910
Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation...
SUSE CVE-2022-31214
A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user...
firejail
This repository is an open-source project for the Firejail tool, which is a Linux security tool that allows users to sandbox applications and restrict their access to system resources. The repository contains various files and directories related to the project, including configuration files,...
Mageia: Security Advisory (MGASA-2022-0348)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated firejail packages fix security vulnerability
root escalation in --join logic CVE-2022-31214...
MGASA-2022-0348 Updated firejail packages fix security vulnerability
root escalation in --join logic CVE-2022-31214...
Fedora: Security Advisory for firejail (FEDORA-2022-e8e9b50a33)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for firejail (FEDORA-2022-827d9ce8ac)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: firejail-0.9.70-1.fc36
Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces. It includes a sandbox profile for Mozilla Firefox...
[SECURITY] Fedora 35 Update: firejail-0.9.70-1.fc35
Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces. It includes a sandbox profile for Mozilla Firefox...
Fedora: Security Advisory for firejail (FEDORA-2022-7ecd36b131)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 37 Update: firejail-0.9.70-1.fc37
Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces. It includes a sandbox profile for Mozilla Firefox...
The vulnerability of the join.c component in the isolated Firejail programming environment, which allows a hacker to escalate their privileges.
The vulnerability of the join.c component in the isolated Firejail programming environment is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Debian: Security Advisory (DLA-3061-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3061-1] firejail security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3061-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 29, 2022 https://wiki.debian.org/LTS -...
Debian DLA-3061-1 : firejail - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3061 advisory. Matthias Gerstner discovered that the --join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalation to root. Fo...