-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6472-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 27, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : bubblewrap CVE ID : not yet available Debian Bug : 1145655 A symlink traversal vulnerability was discovered in bubblewrap, a low-level unprivileged sandboxing tool used by Flatpak and other projects, which could result in sandbox escape by malicious/compromised Flatpak apps. For the stable distribution (trixie), this problem has been fixed in version 0.12.0-1~deb13u1. This updates bubblewrap to the 0.12 release branch, which no longer supports running bubblewrap as setuid root. For additional details please refer to the README.Debian.gz file. We recommend that you upgrade your bubblewrap packages. For the detailed security status of bubblewrap please refer to its security tracker page at: https://security-tracker.debian.org/tracker/bubblewrap Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmqQAZEACgkQEMKTtsN8 TjZB/hAArgmzMY2++53ztTcgiXx1jUJyLEX8WzZCmzgp7NjVEt3bP6PtIag9l50N jcjk4pheIhJn2JE5pUg1F9LF9nsRR3TmbFrDLW+kp5eEGA9fECL3iyPzIax5BxY0 S9TQrWTxoYepEAN++3RAjJVeaYMWpo5h0fWUrotpXw+Pw1ON3tvG4LXGqljLHlJn GeWq7f6xd4+vu6VM9+z8KlYAaLA5Yy0XIKuamjueNy0hPUJQEPjdd9HDYidJP7UL /MZbQTSvtrrmfi/5OplhR+SaDoN+I6Kv0GJ06347xO6KwZrbkmKVpYcB6OHqsnhD pHgrhlb4lQf+SK4nkNlpK2lkZdf4GGv0tgivsbXZxt4VrLMLno+PDtKWpUMJvaJZ dZMU7vLulHrc5pm5uKByvDShj/zBAyt+tCXnqDcax3HCJiwVxkAuqXFkmsify3AG sf7GyC8opEdFpBJEyyVXZPaaHSphlWEPS5G/u4h01y2eIaLj8yUUpYQpg0CtZXoS 0V2F9CXBpM3UX4UaKeeTR8DN3LS5GvlVsoj9iXUJKSXiJj0NskC5f82dVjJ2bjPs wzjlhprd7e1vhSTpFD4b22tK2OiYlX67JG76fSEkHmRJxAmmkJuvVL0ZBUBC7WPo iiZxV1xTLpUFIBD8D/rEspAWO5V27+gOZ/I9GXRuSXWnRUQoG3M= =lUn/ -----END PGP SIGNATURE-----
