Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: d8771544 by Salvatore Bonaccorso at 2021-02-08T17:03:23+01:00 Add new firejail issue - - - - - d4f99c40 by Salvatore Bonaccorso at 2021-02-08T17:04:51+01:00 Add references for firejail issue - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,9 @@ +CVE-2021-XXXX [root privilege escalation in OverlayFS code] + - firejail <unfixed> + NOTE: https://www.openwall.com/lists/oss-security/2021/02/08/5 + NOTE: Fix (disabled overlayfs): https://github.com/netblue30/firejail/commit/97d8a03cad19501f017587cc4e47d8418273834b + NOTE: https://unparalleled.eu/publications/2021/advisory-unpar-2021-0.txt + NOTE: https://unparalleled.eu/blog/2021/20210208-rigged-race-against-firejail-for-local-root/ CVE-2019-XXXX [zstd adds read permissions to files while being compressed or uncompressed] - libzstd 1.4.8+dfsg-1 (bug #981404) NOTE: https://github.com/facebook/zstd/issues/1630 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/dde1d4bd46e91ad56851d35b9c17b1f285774352...d4f99c4078bae6c702f9f1335b61de6573f94adf -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/dde1d4bd46e91ad56851d35b9c17b1f285774352...d4f99c4078bae6c702f9f1335b61de6573f94adf You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
