Search for packages
| purl | pkg:deb/debian/bubblewrap@0.1.2-2?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-dnct-hqvm-4yhe | Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket. |
CVE-2016-8659
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T09:42:26.083406+00:00 | Debian Importer | Fixing | VCID-dnct-hqvm-4yhe | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-11T18:27:18.278117+00:00 | Debian Importer | Fixing | VCID-dnct-hqvm-4yhe | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-02T17:05:38.574499+00:00 | Debian Importer | Fixing | VCID-dnct-hqvm-4yhe | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |