CVE-2017-5206

Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument...

CVE-2017-5206

Firejail before 0.9.44.4 on Linux kernels before 4.8 permits bypassing the seccomp sandbox via the --allow-debuggers option, enabling context-dependent bypass of sandbox protections. Affected: Firejail prior to 0.9.44.4; impacted kernel

Security fix for the ALT Linux 10 package firejail version 0.9.44.4-alt1

Jan. 8, 2017 Anton Midyukov 0.9.44.4-alt1 - new version 0.9.44.4 - Update for release with security fixes: - CVE-2017-5207 -bandwidth root shell found by Martin Carpenter - CVE-2017-5206 disabled --allow-debuggers when running on kernel 4.8 - CVE-2017-5180 root exploit found by Sebastian Krahmer...