Alerts This Week
Warning Icon 1 1,146
Alerts This Week
Warning Icon 1 1,146

SUSE: 2019:0385-1 Important: docker-runc Container Breakout Fix

suse
Calendar Grey February 13, 2019
Dist Suse Esm H88
SUSE Security Update: Security update for docker-runc ______________________________________________
An update that fixes one vulnerability is now available

Summary

This update for docker-runc fixes the following issues: Security issue fixed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout (bsc#1121967) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6-LTSS: zypper in -t patch SUSE-OpenStack-Cloud-6-LTSS-2019-385=1 - SUSE Linux Enterprise Module for Containers 12: zypper in -t patch SUSE-SLE-Module-Containers-12-2019-385=1 - OpenStack Cloud Magnum Orchestration 7: zypper in -t patch SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-385=1 Package List:

Topics%20covered

Topics Covered

security advisory exploit SUSE docker container breakout

References

#1121967

Cross- CVE-2019-5736

Affected Products:

SUSE OpenStack Cloud 6-LTSS

SUSE Linux Enterprise Module for Containers 12

OpenStack Cloud Magnum Orchestration 7

https://www.suse.com/security/cve/CVE-2019-5736.html

https://bugzilla.suse.com/1121967

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:0385-1
Rating: important

Topics%20covered

Topics Covered

security advisory exploit SUSE docker container breakout

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here