v1.13.2
firecracker-microvm/firecrackerv1.13.2Jan 20, 2026by ShadowCurse
AI Summary
Firecracker v1.13.2 backports the Jailer security improvements from v1.14.1, updating the binary copy process to disallow symlinks and hardlinks at the destination path and change ownership of the copied binary to the specified uid/gid.
Key Highlights
- Security improvement in Jailer binary copy process
- Disallows symlinks and hardlinks at destination path
- Changes ownership of copied binary to specified uid/gid
Full Release Notes
### Changed * [#5631](https://github.com/firecracker-microvm/firecracker/pull/5631): Update binary copy process inside Jailer to disallow symlinks and hardlinks at the destination path and change ownership of the copied binary to the specified uid/gid.