openSUSE 16 Security Update : bubblewrap (openSUSE-SU-2026:20811-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20811-1 advisory. This update for bubblewrap fixes the following issue - CVE-2026-41163: improper process attachment via ptrace can lead to arbitrary privileged operation...

CVE-2026-41163

creationtimestamp| type| source ---|---|--- 2026-04-25 11:17:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkcw5o2cdu2s 2026-05-09 05:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfisnqiqh2e...

PT-2026-35169

Name of the Vulnerable Software and Affected Versions bubblewrap versions 0.11.0 through 0.11.1 Description A flaw exists in bubblewrap, a low-level unprivileged sandboxing tool, when operating in setuid mode. A local user can use ptrace to attach to the process and control the unprivileged porti...