[ GLSA 202105-19 ] Firejail

[GLSA]

Gentoo Linux Security Advisory

Title: Firejail: Privilege escalation (GLSA 202105-19)
Severity: high
Exploitable: local
Date: 2021-05-26
Bug(s): #769542
ID: 202105-19

Synopsis

A vulnerability was discovered in Firejail which may allow local
attackers to gain root privileges.


Background

A SUID program that reduces the risk of security breaches by restricting
the running environment of untrusted applications using Linux namespaces
and seccomp-bpf.


Affected Packages

Package: sys-apps/firejail
Vulnerable: < 0.9.64.4
Unaffected: >= 0.9.64.4
Architectures: All supported architectures


Description

It was discovered that a flaw in Firejail’s OverlayFS code allowed
restricted programs to escape sandbox.


Impact

A local attacker could obtain arbitrary file system access via an
application running within a Firejail sandbox, possibly resulting in
privilege escalation.


Workaround

There is no known workaround at this time.

Resolution

All Firejail users should upgrade to the latest version: