Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2019:2787-1 Moderate Update for docker-runc LSM Bypass Fix

suse
Calendar Grey October 25, 2019
Dist Suse Esm H88
A recent update for docker-runc addressed a moderate LSM bypass vulnerability classified under ID SUSE-SU-2019:2787-1, which affected specific systems.
An update that fixes one vulnerability is now available

Summary

This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Containers 12: zypper in -t patch SUSE-SLE-Module-Containers-12-2019-2787=1 - SUSE CaaS Platform 3.0: To install this update, use the SUSE CaaS Platform Velum dashboard. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Linux Enterprise Module for Containers 12 (ppc64le s390x x86_64):

Topics%20covered

Topics Covered

security advisory moderate docker SUSE Linux Enterprise LSM bypass Containers CaaS Platform

References

#1152308

Cross- CVE-2019-16884

Affected Products:

SUSE Linux Enterprise Module for Containers 12

SUSE CaaS Platform 3.0

https://www.suse.com/security/cve/CVE-2019-16884.html

https://bugzilla.suse.com/1152308

Announcement ID: SUSE-SU-2019:2787-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate docker SUSE Linux Enterprise LSM bypass Containers CaaS Platform

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here