Ubuntu
bubblewrap package

bubblewrap 0.1.7-0ubuntu0.16.10.1 source package in Ubuntu

Changelog

bubblewrap (0.1.7-0ubuntu0.16.10.1) yakkety-security; urgency=medium

  * SECURITY UPDATE: bubblewrap escape via TIOCSTI ioctl (LP: #1657357)
    - Fixed in new upstream release 0.1.7 by adding --new-session
      option that use setsid() before executing sandboxed code.
      Users of bubblewrap to confine untrusted programs should either
      add --new-session to the bwrap command line, or prevent the
      TIOCSTI ioctl with a seccomp filter instead (as Flatpak does).
    - New upstream release also adds --unshare-all option to easily
      sandbox all namespaces. A --share-net option can be used with
      --unshare-all to retain the network namespace.
    - CVE-2017-5226
  * debian/bubblewrap.examples: install upstream examples

 -- Jeremy Bicha <email address hidden>  Thu, 19 Jan 2017 21:31:11 -0500

Upload details

Uploaded by:
Jeremy Bícha
Sponsored by:
Tyler Hicks
Uploaded to:
Yakkety
Original maintainer:
Ubuntu Developers
Architectures:
linux-any
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
bubblewrap_0.1.7.orig.tar.gz 94.4 KiB 92b08803abcdafbf9e26b1bb3e7efb7cec177d27dcd58016b8629504fedcff16
bubblewrap_0.1.7-0ubuntu0.16.10.1.debian.tar.xz 5.1 KiB 584a3ee0a6548d9c836007d5e4738e700d748c4e5d36e7f2104a1d5a43f7611a
bubblewrap_0.1.7-0ubuntu0.16.10.1.dsc 2.2 KiB 3102234f70bc85a3e66e5d195395366eba0a9a2cd0236ecb59ead92317867844

View changes file

Binary packages built by this source

bubblewrap: No summary available for bubblewrap in ubuntu yakkety.

No description available for bubblewrap in ubuntu yakkety.

bubblewrap-dbgsym: No summary available for bubblewrap-dbgsym in ubuntu yakkety.

No description available for bubblewrap-dbgsym in ubuntu yakkety.