Unclaimed project
Are you a maintainer of bubblewrap? Claim this project to take control of your public changelog and roadmap.
Changelog
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
Released: 2024-10-30
Dependencies:
Remove the Autotools build system. Meson ≥ 0.49.0 is now required at build-time. (#625, @WhyNotHugo)
For users of bash-completion, bash-completion ≥ 2.10 is recommended. With older bash-completion, bubblewrap might install completions outside its ${prefix} unless overridden with -Dbash_completion_dir=….
Enhancements:
--overlay...New features:
--[ro-]bind-fd option, which can be used to mount a filesystem represented by a file descriptor without time-of-check/time-of-use attacks. This is needed when resolving CVE-2024-42472 (GHSA-7hgv-f2j8-xw87) in Flatpak.Other changes:
SetupOpFlag (no functional change). (#636)This release is intended to be used as part of Flatpak 1.14.x. If possible, please upgrade to 0.10.0 or later instead.
--[ro-]bind-fd option from 0.10.0. This can be used to mount a filesystem represented by a file descriptor without time-of-check/time-of-use attacks, and is needed when resolving CVE-2024-42472 (GHSA-7hgv-f2j8-xw87) in Flatpak.d8cab8943a36cd1bc1b8c6359...
bubblewrap-0.9.0.tar.xz no longer contains Autotools-generated files, although this version can still be built using Autotools after running ./autogen.sh. Future versions are likely to remove the Autotools build system altogether.--argv0 (#91)New features:
--disable-userns option to prevent the sandbox from creating its own nested user namespace (#488)--assert-userns-disabled option to check that an existing userns was created with --disable-userns (#488)CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER (#550)Bug fixes: