bubblewrap

Bubblewrap Many container runtime tools like systemd-nspawn, docker, etc. focus on providing infrastructure for system administrators and orchestration tools e.g. Kubernetes to run containers. These tools are not suitable to give to unprivileged users, because it is trivial to turn such access in...

bubblewrap security update

An update is available for bubblewrap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged...

RLSA-2026:98521 Important: bubblewrap security update

Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fixes: bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 For more detai...

bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

Important: Red Hat Security Advisory: bubblewrap security update

An update for bubblewrap is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Cordon

Cordon ⚠️ PROJECT DEPRECATED Development on this project has been stopped because someone else was working on the same idea and built a better solution. We highly recommend checking out:Fence by Use-Tusk. Note: This repository was originally created forFOSS HACK 2026 , though we unfortunately...

Photon OS 4.0: Bubblewrap PHSA-2026-4.0-1095

An update of the bubblewrap package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1095. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-BU38486 Bubblewrap (bwrap) before version 0

Security vulnerability affects the bubblewrap package. Bubblewrap bwrap before version 0...

CLEANSTART-2026-CS30605 Flatpak is a Linux application sandboxing and distribution framework

Security vulnerability affects the bubblewrap package. Flatpak is a Linux application sandboxing and distribution framework...

Critical Photon OS Security Update - PHSA-2026-4.0-1095

Updates of 'bubblewrap' packages of Photon OS have been released...

Rocky Linux 10.2 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (crlsa-2026_85308)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685308 advisory. bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 Tenable has extracted the preceding description bloc...

Rocky Linux 8 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (crlsa-2026_85306)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685306 advisory. bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (crlsa-2026_85309)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685309 advisory. bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 Tenable has extracted the preceding description block...

RLSA-2026:85308 Important: bubblewrap security update

Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fixes: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 For more details about the...

bubblewrap security update

An update is available for bubblewrap. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged...

bubblewrap security update

An update is available for bubblewrap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged...

RLSA-2026:85309 Important: bubblewrap security update

Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fixes: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 For more details about the...

bubblewrap security update

An update is available for bubblewrap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged...

RLSA-2026:85306 Important: bubblewrap security update

Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces. Security Fixes: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 For more details about the...

AlmaLinux 9 : bubblewrap (ALSA-2026:85309)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:85309 advisory. bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 Tenable has extracted the preceding description block...