UbuntuUpdates.org

Package "bubblewrap"

Name: bubblewrap

Description:

utility for unprivileged chroot and namespace manipulation

Latest version: 0.11.0-2ubuntu0.1
Release: questing (25.10)
Level: security
Repository: main
Homepage: https://github.com/containers/bubblewrap

Links


Download "bubblewrap"


Other versions of "bubblewrap" in Questing

Repository Area Version
base main 0.11.0-2
updates main 0.11.0-2ubuntu0.1

Changelog

Version: 0.11.0-2ubuntu0.1 2026-05-20 19:07:24 UTC

  bubblewrap (0.11.0-2ubuntu0.1) questing-security; urgency=medium

  * SECURITY UPDATE: Privilege escalation via ptrace.
    - debian/patches/CVE-2026-41163.patch: Disallow ptrace while running
      privileged code in bubblewrap.c
    - CVE-2026-41163

 -- Kyle Kernick <email address hidden> Tue, 28 Apr 2026 14:11:22 -0600

CVE-2026-41163 bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then



About   -   Send Feedback to @ubuntu_updates