Candidate: CVE-2016-10121 PublicDate: 2017-04-13 14:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10121 http://www.openwall.com/lists/oss-security/2017/01/05/4 https://github.com/netblue30/firejail/commit/1cab02f5ae3c90c01fae4d1c16381820b757a3a6 (0.9.38) Description: Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH] Patches_firejail: upstream_firejail: released (0.9.38-1) precise_firejail: DNE trusty_firejail: DNE trusty/esm_firejail: DNE vivid/stable-phone-overlay_firejail: DNE vivid/ubuntu-core_firejail: DNE xenial_firejail: not-affected (0.9.38-1) yakkety_firejail: not-affected devel_firejail: not-affected