[Pkg-utopia-maintainers] Bug#1145655: bubblewrap: GHSA-pxhw-h44j-8pfx: sandbox escape via symlink traversal during setup

[Moritz Mühlenhoff]

On Wed, Aug 26, 2026 at 01:06:01PM +0100, Simon McVittie wrote:
> On Wed, 26 Aug 2026 at 11:22:35 +0100, Simon McVittie wrote:
> > As previously discussed with the security team, fixing this in versions
> > older than 0.12.0 does not look feasible, so I'm going to prepare a
> > backport of 0.12.0 to stable.
> 
> Proposed package for trixie-security:
> <https://people.debian.org/~smcv/temp/2026/bubblewrap-bug1145655/> (debdiffs
> included, bubblewrap_0.12.0-1~deb13u1_debianonly.diff is filtered to debian/
> only)

Looks good, I've uploaded your build to security-master.

The DSA will be released tomorrow.

Cheers,
        Moritz