3 Commits

Author SHA1 Message Date
Daniel Golle a9e8063d59 bubblewrap: update to 0.11.2
0.11.2 (CVE-2026-41163):
 * In setuid mode, don't run the low-privileged parts of the setup
   as dumpable, as that allows it to be ptraced which can lead to problems.
 * New build option -Dsupport_setuid, which if set to false (the default)
   disables the support for setuid.

0.11.1:
 * Reset disposition of SIGCHLD, restoring normal subprocess management
   if bwrap was run from a process that was ignoring that signal.
 * Don't ignore --userns 0, --userns2 0 or --pidns 0 if used.
 * Fix grammar in an error message and a broken link in the documentation.

Link: https://github.com/containers/bubblewrap/blob/v0.11.2/NEWS.md
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2026-05-08 22:35:07 +02:00
Fabrice Fontaine d2e43c905d utils/bubblewrap: assign PKG_CPE_ID
cpe:/a:projectatomic:bubblewrap is the correct CPE ID for bubblewrap:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:projectatomic:bubblewrap

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-14 18:00:29 +00:00
Daniel Golle a51ba5aaee bubblewrap: add package
Bubblewrap is a container tool for security sandboxes.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2024-11-16 02:20:57 +00:00