SUSE SLED15 / SLES15 Security Update : flatpak (SUSE-SU-2019:2185-1)

This update for flatpak fixes the following issues : Security issues fixed : CVE-2019-8308: Fixed a potential sandbox escape via /proc bsc1125431. CVE-2019-11460: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl bsc1133043...

Arbitrary Code Execution

bubblewrap is vulnerable to arbitrary code execution. A misuse of temporary directories in /tmp as a mount point allows a local attacker to exploit the vulnerability to execute arbitrary code or prevent other users from executing bubblewrap...

EulerOS 2.0 SP8 : bubblewrap (EulerOS-SA-2019-1762)

According to the version of the bubblewrap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to...

bubblewrap: temporary directory misuse as mount point

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code...

openSUSE Security Update : bubblewrap (openSUSE-2019-1721)

This update for bubblewrap fixes the following issues : Security issue fixed : - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE: Security Advisory for bubblewrap (openSUSE-SU-2019:1721-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1721-1 Security update for bubblewrap

This update for bubblewrap fixes the following issues: Security issue fixed: - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. This update was imported from the SUSE:SLE-15:Update update project...

Security update for bubblewrap (important)

openSUSE Security Update: Security update for bubblewrap Announcement ID: openSUSE-SU-2019:1721-1 Rating: important References: 1136958 Cross-References: CVE-2019-12439 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

SUSE SLED15 / SLES15 Security Update : bubblewrap (SUSE-SU-2019:1826-1)

This update for bubblewrap fixes the following issues : Security issue fixed : CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE-SU-2019:1826-1 Security update for bubblewrap

This update for bubblewrap fixes the following issues: Security issue fixed: - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958...

Photon OS 3.0: Bubblewrap PHSA-2019-3.0-0019

An update of the bubblewrap package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0019. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126191;...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0163

An update of 'falco', 'bubblewrap' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2019-3.0-0019

Updates of 'bubblewrap', 'docker', 'go' packages of Photon OS have been released...

openSUSE Security Update : bubblewrap (openSUSE-2019-1535)

This update for bubblewrap to version 0.3.3 fixes the following issue: Security issue fixed : - CVE-2019-12439: Fixed a temporary directory misuse as mount point which could have allowed local user to prevent others from running bubblewrap. C Tenable Network Security, Inc. The descriptive text an...

OPENSUSE-SU-2019:1535-1 Security update for bubblewrap

This update for bubblewrap to version 0.3.3 fixes the following issue: Security issue fixed: - CVE-2019-12439: Fixed a temporary directory misuse as mount point which could have allowed local user to prevent others from running bubblewrap...

Important Photon OS Security Update - PHSA-2019-0019

Updates of 'bubblewrap', 'docker', 'go' packages of Photon OS have been released...

Security update for bubblewrap (moderate)

openSUSE Security Update: Security update for bubblewrap Announcement ID: openSUSE-SU-2019:1535-1 Rating: moderate References: 1136958 Cross-References: CVE-2019-12439 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Important Photon OS Security Update - PHSA-2019-0163

Updates of 'bubblewrap', 'falco' packages of Photon OS have been released...

CVE-2019-12439

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code. Mitigation The default...

UBUNTU-CVE-2019-12439

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code...