Mageia 2022-0348: firejail security update
Summary
root escalation in --join logic (CVE-2022-31214)
References
- https://bugs.mageia.org/show_bug.cgi?id=30528
- https://www.openwall.com/lists/oss-security/2022/06/08/10
- https://firejail.wordpress.com/download-2/release-notes/
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BANQSQMV546D7IN75266REGOZOIGQEUH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SIBEBE3KFINMGJATBQQS7D2VQQ62ZVMF/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31214
Resolution
MGASA-2022-0348 - Updated firejail packages fix security vulnerability
SRPMS
- 8/core/firejail-0.9.70-1.1.mga8