flar

flar FLAR 是 Fast Light Agent Restrictor（快速轻量级代理限制器）。它运行在一种叫做 gars 的岩石上。 它是一个用 Go 编写的简单轻量级 CLI 工具，用于在隔离的 Bubblewrap bwrap 沙箱 中安全运行编码代理 CLI（例如 Claude Code、Antigravity、Codex、Copilot 和 Reasonix）。 其目的是 即时 且无需复杂配置地 bubblewrap 一个 AI...

bubblewrap

Bubblewrap Muchas herramientas de tiempo de ejecución de contenedores, como systemd-nspawn, docker, etc., se centran en proporcionar infraestructura para administradores de sistemas y herramientas de orquestación p. ej. Kubernetes para ejecutar contenedores. Estas herramientas no son adecuadas pa...

Cordon

Cordon ⚠️ 项目已弃用 该项目的开发已停止 ，因为其他人也在做同样的想法，并且构建了更好的解决方案。 我们强烈推荐查看：Fence by Use-Tusk。 注意：此仓库最初是为FOSS HACK 2026 创建的，但我们不幸未能及时完成。 然而，我们为 Hackathena '26 构建了一个类似的项目，并获得了 三等奖！ 如果您有兴趣，可以在此处找到该仓库：A56-A5/lion。 Cordon 在 Linux 上受限制的文件系统视图中运行任何命令。它使用 Linux 命名空间（通过 bubblewrap）隐藏你的进程不需要的一切——你的主目录、SSH 密钥、AWS...

Rocky Linux 9.2 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (ciqsa-2026_0397)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260397 advisory. This advisory aggregates security fixes for the bubblewrap SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding descriptio...

AlmaLinux 9.2 [TuxCare] Security Update: bubblewrap (ALMALINUX9.2:CLSA-2025:1741125454)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1741125454 advisory. - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised...

Rocky Linux 9.4 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (ciqsa-2026_0521)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260521 advisory. This advisory aggregates security fixes for the bubblewrap SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding descriptio...

Rocky Linux 8.8 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (ciqsa-2026_0329)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260329 advisory. This advisory aggregates security fixes for the bubblewrap SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding descriptio...

Rocky Linux 8.6 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (ciqsa-2026_0013)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260013 advisory. This advisory aggregates security fixes for the bubblewrap SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-42472. Tenable has extracted the preceding descriptio...

Amazon Linux 2023 : bubblewrap (ALAS2023-2026-3105)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3105 advisory. A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the...

TencentOS Server 4: bubblewrap (TSSA-2026:1022)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1022 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

USN-8779-2: Bubblewrap regression

USN-8779-1 fixed vulnerabilities in Bubblewrap. Unfortunately, the fix for CVE-2026-87766 introduced a regression in symlink resolution, preventing certain Flatpak applications from launching. This update reverts that fix until a complete fix is available. We apologize for the inconvenience...

CVE-2026-87766 affecting package bubblewrap for versions less than 0.12.0-1

CVE-2026-87766 affecting package bubblewrap for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : Bubblewrap vulnerabilities (USN-8779-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8779-1 advisory. It was discovered that Bubblewrap incorrectly handled certain...

USN-8779-1: Bubblewrap vulnerabilities

It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2019-12439 It was discovered that Bubblewrap incorrectly handl...

USN-8779-1 bubblewrap vulnerabilities

It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2019-12439 It was discovered that Bubblewrap incorrectly handl...

Astra Linux – Vulnerability in Flatpak

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak application could execute arbitrary code outside its sandbox. Normally, the --command argument of flatpak...

DEBIAN-CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

AZL-100908 CVE-2026-87766 affecting package bubblewrap for versions less than 0.12.0-1

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...