Updated bubblewrap package fixes security vulnerabilities
Publication date: 02 Sep 2026Modification date: 12 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-87766
Description
Sandbox escape: symlink traversal via /oldroot allows writing files
outside sandbox during setup
References
- https://bugs.mageia.org/show_bug.cgi?id=36206
- https://lists.debian.org/debian-security-announce/2026/msg00383.html
- https://github.com/containers/bubblewrap/security/advisories/GHSA-pxhw-h44j-8pfx
- https://www.openwall.com/lists/oss-security/2026/08/27/7
- https://www.cve.org/CVERecord?id=CVE-2026-87766
SRPMS
10/core
- bubblewrap-0.12.0-1.mga10