Re: bubblewrap 0.12.0 fixes writes outside sandbox
Bubblewrap 0.12.0 fixes writes outside the sandbox, tracked as CVE-2026-87766.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #bubblewrap
USN-8779-2: Bubblewrap regression
Ubuntu issued USN-8779-2 reverting a Bubblewrap symlink fix for CVE-2026-87766 that caused a regression preventing some Flatpak apps from launching.
USN-8779-1: Bubblewrap vulnerabilities
Ubuntu fixed two Bubblewrap flaws, CVE-2019-12439 and CVE-2026-87766, enabling local denial of service, code execution, or sandbox-escaped file creation.
Re: bubblewrap 0.12.0 fixes writes outside sandbox
Red Hat Product Security allocated CVE-2026-87766 for a bubblewrap flaw fixed in 0.12.0 that allowed writes outside the sandbox.