Opened 6 months ago

Closed 6 months ago

#23191 closed enhancement (fixed)

bubblewrap-0.11.2

Reported by: Bruce Dubbs Owned by: Joe Locash
Priority: normal Milestone: 13.1
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (2)

comment:1 by Joe Locash, 6 months ago

Owner: changed from blfs-book to Joe Locash
Status: new → assigned

comment:2 by Joe Locash, 6 months ago

Resolution: → fixed
Status: assigned → closed 
bubblewrap 0.11.2
=================

Released: 2026-04-23

Bug fixes:

  * In setuid mode, don't run the low-privileged parts parts of the setup
    as dumpable, as that allows it to be ptraced which can lead to problems.
    This is CVE-2026-41163, and was reported by François Diakhate.

Enhancements:

  * New build option `-Dsupport_setuid`, which if set to false (which
    is the default) disables the support for setuid. Binaries built
    with this will refuse to run if made setuid. We recommend building
    normal bubblewrap binaries like this, which allows you to safely
    ignore any security issues that only affect setuid mode.

Fixed at c8e521a4c6.

Note: See TracTickets for help on using tickets.