From ec099811d6451d2ea0f705b836bb8d426671271b93366c89cf39a381cc22cdaa Mon Sep 17 00:00:00 2001 From: Sebastian Wagner Date: Tue, 4 Jun 2019 07:32:22 +0000 Subject: [PATCH] CVE-2019-12589 boo#1137139 OBS-URL: https://build.opensuse.org/package/show/Virtualization/firejail?expand=0&rev=19 --- firejail.changes | 2 ++ 1 file changed, 2 insertions(+) diff --git a/firejail.changes b/firejail.changes index f253ece..ea97ee7 100644 --- a/firejail.changes +++ b/firejail.changes @@ -7,6 +7,8 @@ Sun Jun 2 16:30:42 UTC 2019 - Sebastian Wagner within the jail. A malicious process can modify files from inside the jail. Processes that are later joined to the jail will not have seccomp filters applied. + CVE-2019-12589 + boo#1137139 * memory-deny-write-execute now also blocks memfd_create * add private-cwd option to control working directory within jail * blocking system D-Bus socket with --nodbus