Re: [BLFS Trac] #23191: bubblewrap-0.11.2

#23191: bubblewrap-0.11.2
-------------------------+-------------------------
 Reporter:  Bruce Dubbs  |       Owner:  Joe Locash
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:  fixed
 Keywords:               |
-------------------------+-------------------------
Changes (by Joe Locash):

 * resolution:   => fixed
 * status:  assigned => closed

Comment:

 {{{
 bubblewrap 0.11.2
 =================

 Released: 2026-04-23

 Bug fixes:

   * In setuid mode, don't run the low-privileged parts parts of the setup
     as dumpable, as that allows it to be ptraced which can lead to
 problems.
     This is CVE-2026-41163, and was reported by François Diakhate.

 Enhancements:

   * New build option `-Dsupport_setuid`, which if set to false (which
     is the default) disables the support for setuid. Binaries built
     with this will refuse to run if made setuid. We recommend building
     normal bubblewrap binaries like this, which allows you to safely
     ignore any security issues that only affect setuid mode.
 }}}
 Fixed at c8e521a4c6.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23191#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page