Firejail: Privilege escalation A vulnerability was discovered in Firejail which may allow local attackers to gain root privileges. firejail 2021-05-26 2021-05-26 769542 local 0.9.64.4 0.9.64.4

A SUID program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces and seccomp-bpf.

It was discovered that a flaw in Firejail’s OverlayFS code allowed restricted programs to escape sandbox.

A local attacker could obtain arbitrary file system access via an application running within a Firejail sandbox, possibly resulting in privilege escalation.

There is no known workaround at this time.

All Firejail users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/firejail-0.9.64.4"
CVE-2021-26910 whissi whissi