Summary
Roman Fiedler discovered that a race condition existed in Firejail
when using OverlayFS to prevent writes to the underlying file system. A
local attacker could use this to gain administrative privileges. Note:
this update disables support for OverlayFS in Firejail.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | firejail | 0.9.62-3ubuntu0.1 |
Vulnerabilities 1
-
High 7.8
Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race conditi…
References
-
report
https://ubuntu.com/security/CVE-2021-26910