USN-5141-1: Firejail vulnerability
11 November 2021
Firejail could be made to overwrite files as the administrator.
Releases
Packages
- firejail - Application sandbox
Details
Roman Fiedler discovered that a race condition existed in Firejail
when using OverlayFS to prevent writes to the underlying file system. A
local attacker could use this to gain administrative privileges. Note:
this update disables support for OverlayFS in Firejail.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.04
In general, a standard system update will make all the necessary changes.