Bastille
Monthly
Jailed users on Bastille through 1.4.4 can plant symlinks inside their own jail so that administrator-run cp.sh, rcp.sh or jcp.sh copies follow those links and read or overwrite host files with root privileges, breaking jail isolation. Exploitation is not remote: it requires an account with write access inside a jail plus a host administrator later running one of the affected subcommands against that jail, which places the flaw at medium severity rather than an emergency. No public exploit code and no confirmed active exploitation were identified at time of analysis; the vendor has published an upstream fix that resolves paths before copying.
Jailed users on Bastille through 1.4.4 can plant symlinks inside their own jail so that administrator-run cp.sh, rcp.sh or jcp.sh copies follow those links and read or overwrite host files with root privileges, breaking jail isolation. Exploitation is not remote: it requires an account with write access inside a jail plus a host administrator later running one of the affected subcommands against that jail, which places the flaw at medium severity rather than an emergency. No public exploit code and no confirmed active exploitation were identified at time of analysis; the vendor has published an upstream fix that resolves paths before copying.