Bug 27732

Summary:	bubblewrap security vulnerability
Product:	Mageia	Reporter:	Zombie Ryushu <zombie_ryushu>
Component:	Security	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED DUPLICATE	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	7
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://nvd.nist.gov/vuln/detail/CVE-2020-5291
Whiteboard:
Source RPM:	bubblewrap	CVE:	CVE-2020-5291
Status comment:

Description Zombie Ryushu 2020-12-04 09:00:48 CET

Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable. This can in turn be used to gain root permissions. Note that this only affects the combination of bubblewrap in setuid mode (which is typically used when unprivileged user namespaces are not supported) and the support of unprivileged user namespaces. Known to be affected are: * Debian testing/unstable, if unprivileged user namespaces enabled (not default) * Debian buster-backports, if unprivileged user namespaces enabled (not default) * Arch if using `linux-hardened`, if unprivileged user namespaces enabled (not default) * Centos 7 flatpak COPR, if unprivileged user namespaces enabled (not default) This has been fixed in the 0.4.1 release, and all affected users should update.

Zombie Ryushu 2020-12-04 09:01:09 CET

CVE: (none) => CVE-2020-5291

Comment 1 David Walser 2020-12-04 13:31:08 CET

Yet another INVALID duplicate.

*** This bug has been marked as a duplicate of bug 26937 ***

Resolution: (none) => DUPLICATE
Status: NEW => RESOLVED