bubblewrap

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 9, 2026
Last mentionedSep 22, 2026

Timeline

4 articles · newest first

Re: bubblewrap 0.12.0 fixes writes outside sandbox

Bubblewrap 0.12.0 fixes writes outside the sandbox, tracked as CVE-2026-87766.

oss-securitySep 22, 21:56 UTC · Sep 22, 2026VulnerabilityCVE-2026-877662 · 2 reads

USN-8779-2: Bubblewrap regression

Ubuntu issued USN-8779-2 reverting a Bubblewrap symlink fix for CVE-2026-87766 that caused a regression preventing some Flatpak apps from launching.

Ubuntu Security NoticesSep 17, 22:20 UTC · Sep 17, 2026AdvisoryCVE-2026-87766 CVE-2019-124391 · 1 read

USN-8779-1: Bubblewrap vulnerabilities

Ubuntu fixed two Bubblewrap flaws, CVE-2019-12439 and CVE-2026-87766, enabling local denial of service, code execution, or sandbox-escaped file creation.

Ubuntu Security NoticesSep 17, 15:50 UTC · Sep 17, 2026AdvisoryCVE-2019-12439 CVE-2026-877662 · 1 read

Re: bubblewrap 0.12.0 fixes writes outside sandbox

Red Hat Product Security allocated CVE-2026-87766 for a bubblewrap flaw fixed in 0.12.0 that allowed writes outside the sandbox.

oss-securitySep 9, 14:33 UTC · Sep 9, 2026VulnerabilityCVE-2026-877662 · 1 read

Related CVEs

by mentions

CVE-2026-87766<1%8.8
Symlink-following sandbox escape (arbitrary file write) in bubblewrap before 0.12.0
published Sep 9, 2026bubblewrap project (freedesktop.org) bubblewrap
CVE-2019-12439<1%7.8
bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point
published May 29, 2019projectatomic bubblewrap

Appears with

Ubuntuvendor · 2
Canonicalvendor · 2
Red Hat Product Securityorganization · 1
Ubuntuorganization · 1
Flatpakproduct · 1
Red Hatvendor · 1
Ubuntu 18.04 LTSproduct · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.