Ubuntu
firejail package

firejail 0.9.62-3ubuntu0.1 source package in Ubuntu

Changelog

firejail (0.9.62-3ubuntu0.1) focal-security; urgency=low

  * SECURITY UPDATE: bypass of access restrictions (LP: #1916767)
    - disable OverlayFS support which contains a TOCTOU race condition
      between a stat operation and an OverlayFS mount.
    - CVE-2021-26910

 -- Reiner Herrmann <email address hidden>  Sat, 27 Mar 2021 15:20:50 +0000

Upload details

Uploaded by:
Reiner Herrmann
Sponsored by:
Steve Beattie
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
linux-any all
Section:
utils
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe misc
Focal security universe misc

Downloads

File Size SHA-256 Checksum
firejail_0.9.62.orig.tar.xz 374.8 KiB 0568081ce950c5240e1b2fca7014b798f589657249e17283a14e20e41f8d5ae0
firejail_0.9.62.orig.tar.xz.asc 488 bytes 3961565f77829b9afe630d487641ee095e65e29a0315d5b55218c01e9917358c
firejail_0.9.62-3ubuntu0.1.debian.tar.xz 15.1 KiB a5d2da526bcd8371be546761490cc862a8875ef269e54a8dce52234143daee6e
firejail_0.9.62-3ubuntu0.1.dsc 2.5 KiB 06065d7b95a64f5c570e33aae008de0b4e9abfb0209e792e92c435bb7fc3ffd1

View changes file

Binary packages built by this source

firejail: sandbox to restrict the application environment

 Firejail is a SUID security sandbox program that reduces the risk of
 security breaches by restricting the running environment of untrusted
 applications using Linux namespaces and seccomp-bpf. It allows a
 process and all its descendants to have their own private view of the
 globally shared kernel resources, such as the network stack, process
 table, mount table.

firejail-dbgsym: debug symbols for firejail
firejail-profiles: profiles for the firejail application sandbox

 Firejail is a SUID security sandbox program that reduces the risk of
 security breaches by restricting the running environment of untrusted
 applications using Linux namespaces and seccomp-bpf. It allows a
 process and all its descendants to have their own private view of the
 globally shared kernel resources, such as the network stack, process
 table, mount table.
 .
 This package contains firejail profiles for various applications.