| Summary: | <sys-apps/firejail-0.9.68: insufficient filesystem access control | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | minor | CC: | hlein, proxy-maint |
| Priority: | Normal | Keywords: | PullRequest |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | https://github.com/netblue30/firejail/issues/4780 | ||
| See Also: |
https://github.com/gentoo/gentoo/pull/24102 https://bugs.gentoo.org/show_bug.cgi?id=834601 |
||
| Whiteboard: | B4 [noglsa] | ||
| Package list: | Runtime testing required: | --- | |
|
Description
John Helmert III
2022-02-07 01:11:32 UTC
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f83326db36c6215b3fb69cf9630c5e3b53d32c43 commit f83326db36c6215b3fb69cf9630c5e3b53d32c43 Author: Hank Leininger <hlein@korelogic.com> AuthorDate: 2022-02-07 04:40:48 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-02-18 02:38:46 +0000 sys-apps/firejail: version bump, remove old, Gentoo compat tweaks Upstream released a security bump. Also, added some fixes and workarounds for bits & configs that break on Gentoo. Signed-off-by: Hank Leininger <hlein@korelogic.com> Bug: https://bugs.gentoo.org/832819 Closes: https://bugs.gentoo.org/694966 Closes: https://bugs.gentoo.org/663784 Package-Manager: Portage-3.0.30, Repoman-3.0.3 Closes: https://github.com/gentoo/gentoo/pull/24102 Signed-off-by: Sam James <sam@gentoo.org> sys-apps/firejail/Manifest | 3 +- sys-apps/firejail/files/firecfg.config.patch | 71 ++++++++++++++++ .../firejail/files/firejail-0.9.68-envlimits.patch | 12 +++ sys-apps/firejail/files/profile_display.local | 2 + sys-apps/firejail/files/profile_patch.local | 8 ++ sys-apps/firejail/files/profile_pdftotext.local | 2 + sys-apps/firejail/files/profile_wget.local | 5 ++ sys-apps/firejail/firejail-0.9.64.4.ebuild | 99 ---------------------- ...rejail-0.9.66.ebuild => firejail-0.9.68.ebuild} | 27 +++++- sys-apps/firejail/firejail-9999.ebuild | 8 +- 10 files changed, 128 insertions(+), 109 deletions(-) The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5a25b734662e6a5c2786285475345ed5046c0c9b commit 5a25b734662e6a5c2786285475345ed5046c0c9b Author: Sam James <sam@gentoo.org> AuthorDate: 2022-02-21 01:50:22 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-02-21 01:51:05 +0000 sys-apps/firejail: stabilize 0.9.68 for amd64 Accidentally dropped stable keywords. Oops. Bug: https://bugs.gentoo.org/832819 Fixes: f83326db36c6215b3fb69cf9630c5e3b53d32c43 Signed-off-by: Sam James <sam@gentoo.org> sys-apps/firejail/firejail-0.9.68.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) |