DSA-4849: -1 firejail -- security update

Published Feb 9, 2021

Updated

firejail - security update

Other sources

Roman Fiedler discovered a vulnerability in the OverlayFS code in firejail, a sandbox program to restrict the running environment of untrusted applications, which could result in root privilege escalation. This update disables OverlayFS support in firejail.

Affected Software

2 affected components

debian/firejail

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade firejail to a version that resolves this vulnerability.
Patch DSA-4849-1

Event History

Feb 9, 2021

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2021-26910

Frequently Asked Questions

What capability does an attacker need to exploit this issue?

The issue could allow root privilege escalation through the OverlayFS code in firejail. An attacker would need to be able to use or reach a firejail installation with OverlayFS support enabled.

What mitigation is available if the security update cannot be applied immediately?

Disable OverlayFS support in firejail. The referenced security update mitigates the vulnerability by disabling that support.

DSA-4849: -1 firejail -- security update

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What capability does an attacker need to exploit this issue?

What mitigation is available if the security update cannot be applied immediately?

Company

Resources

Contact

Frequently Asked Questions

What capability does an attacker need to exploit this issue?

What mitigation is available if the security update cannot be applied immediately?