This update for lxc fixes the following issue:
- CVE-2016-8649: guest escape via ptrace of lxc-attach (boo#1010933).
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE Leap 42.2:
zypper in -t patch openSUSE-2016-1488=1
- openSUSE Leap 42.1:
zypper in -t patch openSUSE-2016-1488=1
- openSUSE 13.2:
zypper in -t patch openSUSE-2016-1488=1
To bring your system up-to-date, use "zypper patch".
- openSUSE Leap 42.2 (x86_64):
lxc-1.1.2-10.1
lxc-debuginfo-1.1.2-10.1
lxc-debugsource-1.1.2-10.1
lxc-devel-1.1.2-10.1
- openSUSE Leap 42.1 (i586 x86_64):
lxc-1.1.2-9.1
lxc-debuginfo-1.1.2-9.1
lxc-debugsource-1.1.2-9.1
lxc-devel-1.1.2-9.1
- openSUSE 13.2 (i586 x86_64):
lxc-1.0.6-12.1
lxc-debuginfo-1.0.6-12.1
lxc-debugsource-1.0.6-12.1
lxc-devel-1.0.6-12.1
https://www.suse.com/security/cve/CVE-2016-8649.html
https://bugzilla.suse.com/1010933
Get the latest Linux and open source security news straight to your inbox.