Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/firejail@0.9.58.2-2%2Bdeb10u3
purl pkg:deb/debian/firejail@0.9.58.2-2%2Bdeb10u3
Next non-vulnerable version 0.9.64.4-2+deb11u1
Latest non-vulnerable version 0.9.64.4-2+deb11u1
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-56sf-yfk6-1key
Aliases:
CVE-2021-26910
A vulnerability was discovered in Firejail which may allow local attackers to gain root privileges.
0.9.64.4-2+deb11u1
Affected by 0 other vulnerabilities.
VCID-9auq-b7rs-5fe2
Aliases:
CVE-2022-31214
A vulnerability has been discovered in Firejail which could result in local root privilege escalation.
0.9.64.4-2+deb11u1
Affected by 0 other vulnerabilities.
VCID-eud3-k24q-6ber
Aliases:
CVE-2020-17368
Multiple vulnerabilities have been found in Firejail, the worst of which could result in the arbitrary execution of code.
0.9.64.4-2+deb11u1
Affected by 0 other vulnerabilities.
VCID-uzv4-9xtx-ryhr
Aliases:
CVE-2020-17367
Multiple vulnerabilities have been found in Firejail, the worst of which could result in the arbitrary execution of code.
0.9.64.4-2+deb11u1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-56sf-yfk6-1key A vulnerability was discovered in Firejail which may allow local attackers to gain root privileges. CVE-2021-26910
VCID-9auq-b7rs-5fe2 A vulnerability has been discovered in Firejail which could result in local root privilege escalation. CVE-2022-31214
VCID-eud3-k24q-6ber Multiple vulnerabilities have been found in Firejail, the worst of which could result in the arbitrary execution of code. CVE-2020-17368
VCID-j4ay-sffd-zbat Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail (with the exploit code inside) needs to be started as root, and it also needs to be terminated as root from the host (either by stopping it ungracefully (e.g., SIGKILL), or by using the --shutdown control command). This is similar to CVE-2019-5736. CVE-2019-12499
VCID-uzv4-9xtx-ryhr Multiple vulnerabilities have been found in Firejail, the worst of which could result in the arbitrary execution of code. CVE-2020-17367
VCID-wr4q-yy27-7qar In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter has been modified by an attacker. CVE-2019-12589

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T01:07:11.006844+00:00 Debian Oval Importer Fixing VCID-wr4q-yy27-7qar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:47:31.292113+00:00 Debian Oval Importer Affected by VCID-uzv4-9xtx-ryhr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:46:13.669053+00:00 Debian Oval Importer Affected by VCID-56sf-yfk6-1key https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:06:33.379412+00:00 Debian Oval Importer Affected by VCID-9auq-b7rs-5fe2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:35:45.370931+00:00 Debian Oval Importer Fixing VCID-j4ay-sffd-zbat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:05:13.042265+00:00 Debian Oval Importer Affected by VCID-eud3-k24q-6ber https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:15:03.342819+00:00 Debian Oval Importer Fixing VCID-9auq-b7rs-5fe2 https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T15:06:42.810101+00:00 Debian Oval Importer Fixing VCID-56sf-yfk6-1key https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T14:54:10.457158+00:00 Debian Oval Importer Fixing VCID-uzv4-9xtx-ryhr https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T14:53:39.521088+00:00 Debian Oval Importer Fixing VCID-eud3-k24q-6ber https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-12T00:39:09.772123+00:00 Debian Oval Importer Fixing VCID-wr4q-yy27-7qar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-12T00:20:02.032555+00:00 Debian Oval Importer Affected by VCID-uzv4-9xtx-ryhr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:20:51.008450+00:00 Debian Oval Importer Affected by VCID-56sf-yfk6-1key https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:46:35.294851+00:00 Debian Oval Importer Affected by VCID-9auq-b7rs-5fe2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:18:29.112770+00:00 Debian Oval Importer Fixing VCID-j4ay-sffd-zbat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:52:45.623129+00:00 Debian Oval Importer Affected by VCID-eud3-k24q-6ber https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:03:22.694716+00:00 Debian Oval Importer Fixing VCID-9auq-b7rs-5fe2 https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:55:00.736659+00:00 Debian Oval Importer Fixing VCID-56sf-yfk6-1key https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:42:25.647990+00:00 Debian Oval Importer Fixing VCID-uzv4-9xtx-ryhr https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:41:53.893970+00:00 Debian Oval Importer Fixing VCID-eud3-k24q-6ber https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-09T00:09:05.443330+00:00 Debian Oval Importer Fixing VCID-wr4q-yy27-7qar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:50:49.888795+00:00 Debian Oval Importer Affected by VCID-uzv4-9xtx-ryhr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:54:10.122482+00:00 Debian Oval Importer Affected by VCID-56sf-yfk6-1key https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:26:21.626765+00:00 Debian Oval Importer Affected by VCID-9auq-b7rs-5fe2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:02:17.625040+00:00 Debian Oval Importer Fixing VCID-j4ay-sffd-zbat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:46:05.153646+00:00 Debian Oval Importer Affected by VCID-eud3-k24q-6ber https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T14:58:53.705471+00:00 Debian Oval Importer Fixing VCID-9auq-b7rs-5fe2 https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T23:27:18.966113+00:00 Debian Oval Importer Fixing VCID-56sf-yfk6-1key https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T23:15:22.741936+00:00 Debian Oval Importer Fixing VCID-uzv4-9xtx-ryhr https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T23:14:52.503546+00:00 Debian Oval Importer Fixing VCID-eud3-k24q-6ber https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0