[From nobody Wed Aug 26 12:21:06 2026
Received: (at submit) by bugs.debian.org; 26 Aug 2026 10:22:39 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-107.1 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,
 FOURLA,FROMDEVELOPER,SPF_HELO_NONE,SPF_PASS,USER_IN_DKIM_WELCOMELIST
 autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 15; hammy, 149; neutral, 59; spammy,
 1. spammytokens:0.954-+--launched
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: <smcv@debian.org>
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:34126)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <smcv@debian.org>) id 1wzAmF-007oPB-2H
 for submit@bugs.debian.org; Wed, 26 Aug 2026 10:22:39 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:Content-Type:MIME-Version:Message-ID:
 Subject:To:From:Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
 Content-Description:In-Reply-To:References;
 bh=BIomnh0dSzS9G+gGPTJK8GnFR078rO8AiKKUZIIe1ao=; b=Z9OZjs2N4nKp01UvV6jAoTZ80e
 J/dyKBd5Wd0VAMb03zd5dN/KnMvahB+dQr3OmrT87o4beJitACFT2kCckGQ1YN3OrqUo+Jdabc3Ti
 2DNlXg0c5fOXwiYQTZDgq0KrgclL+2BX/9X8L7iyOXvCm2c0q5YHUCTqMWHu7aMeOO+i7cWE9nVX2
 EVgb/LZk7N+pQTWUSlTykm3EKdBQ8t4NQMcWptoyH2QU5bJGoo+NQ1r2+KgBO1GNo7O5BnpBq2b+k
 y0e1dplVVMiKGC+6Wl+Rx3EvkLwD972hrg+4xmozz1JYYWEAlHVum2YHAj76LwhBgWBU3rhumilHc
 ZmToKRgw==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <smcv@debian.org>) id 1wzAmE-00F9Ce-0n
 for submit@bugs.debian.org; Wed, 26 Aug 2026 10:22:38 +0000
Date: Wed, 26 Aug 2026 11:22:35 +0100
From: Simon McVittie <smcv@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: bubblewrap: GHSA-pxhw-h44j-8pfx: sandbox escape via symlink
 traversal during setup
Message-ID: <ao6-a6Y-h3prpRR1@definition.pseudorandom.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Mutt-Fcc: =.lists.debian/
X-Reportbug-Version: 13.2.0+nmu1
X-Debian-User: smcv
Delivered-To: submit@bugs.debian.org

Source: bubblewrap
Version: 0.1.0
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>

https://github.com/containers/bubblewrap/security/advisories/GHSA-pxhw-h44j-8pfx:
>If bubblewrap is used to create files on attacker controlled filesystem
>content (such as a malicious app image), then the attacker can use
>symlinks to redirect those file to be created on the host. This happens
>during setup of the sandbox, before anything is running, so there is no
>way to escape a sandbox at runtime.
>
>The bubblewrap arguments are not typically under the attackers control,
>so the risks depend on exactly how bwrap it is being used. Any files
>created by bubblewrap in this way are created by the uid/gid that
>launched bubblewrap, which is generally not root, so sandbox escapes
>are not privileged.
>
>This vulnerability affects Flatpak if a malicious or compromised app
>is used, and potentially affects other app frameworks that work in a
>similar way.

No CVE ID is currently available. Please reference as 
GHSA-pxhw-h44j-8pfx until we have a CVE ID.

As previously discussed with the security team, fixing this in versions 
older than 0.12.0 does not look feasible, so I'm going to prepare a 
backport of 0.12.0 to stable.

    smcv
]