Fdiakh

**Name of the Vulnerable Software and Affected Versions** bubblewrap versions 0.11.0 through 0.11.1 **Description** A flaw exists in bubblewrap, a low-level unprivileged sandboxing tool, when operating in setuid mode. A local user can use `ptrace` to attach to the process and control the unprivileged portion of the sandbox setup phase. This allows the attacker to bypass intended sandboxing restrictions and execute privileged operations that are normally restricted, specifically the creation of overlay mounts. This could potentially lead to privilege escalation on the system. **Recommendations** Update to version 0.11.2.

**Name of the Vulnerable Software and Affected Versions** sshproxy versions prior to 1.6.3 **Description** The issue allows any user authorized to connect to an SSH server using `sshproxy` to inject options to the `ssh` command executed by `sshproxy`. This affects all versions of `sshproxy` prior to 1.6.3. **Recommendations** For versions prior to 1.6.3, update to version 1.6.3 or later to resolve the issue. As a temporary workaround, consider using the `force command` option in `sshproxy.yaml`, but note that this is rarely relevant.