From https://github.com/netblue30/firejail/releases/tag/0.9.68: "security: bugfix: private-cwd leaks access to the entire filesystem"
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f83326db36c6215b3fb69cf9630c5e3b53d32c43 commit f83326db36c6215b3fb69cf9630c5e3b53d32c43 Author: Hank Leininger <hlein@korelogic.com> AuthorDate: 2022-02-07 04:40:48 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-02-18 02:38:46 +0000 sys-apps/firejail: version bump, remove old, Gentoo compat tweaks Upstream released a security bump. Also, added some fixes and workarounds for bits & configs that break on Gentoo. Signed-off-by: Hank Leininger <hlein@korelogic.com> Bug: https://bugs.gentoo.org/832819 Closes: https://bugs.gentoo.org/694966 Closes: https://bugs.gentoo.org/663784 Package-Manager: Portage-3.0.30, Repoman-3.0.3 Closes: https://github.com/gentoo/gentoo/pull/24102 Signed-off-by: Sam James <sam@gentoo.org> sys-apps/firejail/Manifest | 3 +- sys-apps/firejail/files/firecfg.config.patch | 71 ++++++++++++++++ .../firejail/files/firejail-0.9.68-envlimits.patch | 12 +++ sys-apps/firejail/files/profile_display.local | 2 + sys-apps/firejail/files/profile_patch.local | 8 ++ sys-apps/firejail/files/profile_pdftotext.local | 2 + sys-apps/firejail/files/profile_wget.local | 5 ++ sys-apps/firejail/firejail-0.9.64.4.ebuild | 99 ---------------------- ...rejail-0.9.66.ebuild => firejail-0.9.68.ebuild} | 27 +++++- sys-apps/firejail/firejail-9999.ebuild | 8 +- 10 files changed, 128 insertions(+), 109 deletions(-)
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5a25b734662e6a5c2786285475345ed5046c0c9b commit 5a25b734662e6a5c2786285475345ed5046c0c9b Author: Sam James <sam@gentoo.org> AuthorDate: 2022-02-21 01:50:22 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-02-21 01:51:05 +0000 sys-apps/firejail: stabilize 0.9.68 for amd64 Accidentally dropped stable keywords. Oops. Bug: https://bugs.gentoo.org/832819 Fixes: f83326db36c6215b3fb69cf9630c5e3b53d32c43 Signed-off-by: Sam James <sam@gentoo.org> sys-apps/firejail/firejail-0.9.68.ebuild | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)