Advisories » MGASA-2026-0371

Updated bubblewrap package fixes security vulnerabilities

Publication date: 02 Sep 2026
Modification date: 02 Sep 2026
Type: security
Affected Mageia releases : 10

Description

Sandbox escape: symlink traversal via /oldroot allows writing files
outside sandbox during setup
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36206
• https://lists.debian.org/debian-security-announce/2026/msg00383.html
• https://github.com/containers/bubblewrap/security/advisories/GHSA-pxhw-h44j-8pfx
• https://www.openwall.com/lists/oss-security/2026/08/27/7

SRPMS

10/core

• bubblewrap-0.12.0-1.mga10