Fedora 25: Runc Security Update Critical Escalation Issue

The runc command can be used to start containers which are packaged

in accordance with the Open Container Initiative's specifications,

and to manage containers running under runc.

V1.0 final release ---- bump runc commit ---- Update to latest release

candidate

[ 1 ] Bug #1392442 - runc bash completions are installed in the wrong place.

https://bugzilla.redhat.com/show_bug.cgi?id=1392442

[ 2 ] Bug #1342707 - runc-v1.0.0-rc1 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1342707

[ 3 ] Bug #1460148 - dependency on criu broken for s390x

https://bugzilla.redhat.com/show_bug.cgi?id=1460148

[ 4 ] Bug #1412238 - CVE-2016-9962 runc: docker: insecure opening of file-descriptor allows privilege escalation [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1412238

su -c 'dnf upgrade runc' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org