Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisoryupdatecriticalFedora 30: FEDORA-2019-2baa1f7b19 Critical: LXCFS 3.0.4 Update
Update LXC to version 3.0.4. The release announcement can be found [here](https://discuss.linuxcontainers.org/t/lxc-3-0-4-has-been-released/5080).. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-2baa1f7b19 2019-09-06 12:30:29.163804 --------------------------------------------------------------------------------Name : lxcfs Product : Fedora 30 Version : 3.0.4 Release : 1.fc30 URL : https://linuxcontainers.org/lxcfs/ Summary : FUSE based filesystem for LXC Description : LXCFS is a simple userspace filesystem designed to work around some current limitations of the Linux kernel. Specifically, it's providing two main things - A set of files which can be bind-mounted over their /proc originals to provide CGroup-aware values. - A cgroupfs-like tree which is container aware. The code is pretty simple, written in C using libfuse. The main driver for this work was the need to run systemd based containers as a regular unprivileged user while still allowing systemd inside the container to interact with cgroups. Now with the introduction of the cgroup namespace in the Linux kernel, that part is no longer necessary on recent kernels and focus is now on making containers feel more like a real independent system through the proc masking feature. --------------------------------------------------------------------------------Update Information: Update LXC to version 3.0.4. The release announcement can be found [here](https://discuss.linuxcontainers.org/t/lxc-3-0-4-has-been-released/5080). --------------------------------------------------------------------------------ChangeLog: * Sun Jul 7 2019 Thomas Moschny - 3.0.4-1 - Update to 3.0.4. --------------------------------------------------------------------------------References: [ 1 ] Bug #1664908 - CVE-2019-5736 runc: Execution of malicious containers allows for container escape and access to host filesystem https://bugzilla.redhat.com/show_bug.cgi?id=1664908 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-2baa1f7b19' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 06, 2019
•Critical
Fedora
202
security advisorysoftware updateimportantopenSUSE Leap 42.3: 2019:1481-1 Important: LXC Container Security Fix
An update that fixes 6 vulnerabilities is now available.. openSUSE Security Update: Security update for lxc, lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1481-1 Rating: important References: #1036360 #1099239 #1122185 #1131762 #988348 #998326 Cross-References: CVE-2015-1331 CVE-2015-1334 CVE-2015-1335 CVE-2017-5985 CVE-2018-6556 CVE-2019-5736 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for lxc, lxcfs to version 3.1.0 fixes the following issues: Security issues fixed: - CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185). - CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348). Non-security issues fixed: - Update to LXC 3.1.0. The changelog is far too long to include here, please look at https://linuxcontainers.org/. (boo#1131762) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1481=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): lxcfs-3.0.3-2.1 lxcfs-debuginfo-3.0.3-2.1 lxcfs-debugsource-3.0.3-2.1 - openSUSE Leap 42.3 (x86_64): liblxc-devel-3.1.0-24.1 liblxc1-3.1.0-24.1 liblxc1-debuginfo-3.1.0-24.1 lxc-3.1.0-24.1 lxc-debuginfo-3.1.0-24.1 lxc-debugsource-3.1.0-24.1 pam_cgfs-3.1.0-24.1 pam_cgfs-debuginfo-3.1.0-24.1 - openSUSE Leap 42.3 (noarch): lxc-bash-completion-3.1.0-24.1 lxcfs-hooks-lxc-3.0.3-2.1 References: https://www.suse.com/security/cve/CVE-2015-1331.html https://www.suse.com/security/cve/CVE-2015-1334.html https://www.suse.com/security/cve/CVE-2015-1335.html https://www.suse.com/security/cve/CVE-2017-5985.html https://www.suse.com/security/cve/CVE-2018-6556.html https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1036360 https://bugzilla.suse.com/1099239 https://bugzilla.suse.com/1122185 https://bugzilla.suse.com/1131762 https://bugzilla.suse.com/988348 https://bugzilla.suse.com/998326 -- . This revision tackles essential concerns regarding lxc and lxcfs within openSUSE, guaranteeing protection from certain vulnerabilities.. openSUSE Security Update, lxc update, lxcfs vulnerability, container security. . Severity: Important. LinuxSecurity.com Team
May 31, 2019
•Important
OpenSUSE
202
security advisorysoftware updateimportantopenSUSE Leap 15.0: 2019:1275-1 Important: LXC Container Breakout Fixed
An update that solves two vulnerabilities and has one errata is now available.. openSUSE Security Update: Security update for lxc, lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1275-1 Rating: important References: #1122185 #1131762 #988348 Cross-References: CVE-2018-6556 CVE-2019-5736 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for lxc, lxcfs to version 3.1.0 fixes the following issues: Security issues fixed: - CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185). - CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348). Non-security issues fixed: - Update to LXC 3.1.0. The changelog is far too long to include here, please look at https://linuxcontainers.org/. (boo#1131762) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1275=1 Package List: - openSUSE Leap 15.0 (x86_64): liblxc-devel-3.1.0-lp150.2.10.1 liblxc1-3.1.0-lp150.2.10.1 liblxc1-debuginfo-3.1.0-lp150.2.10.1 lxc-3.1.0-lp150.2.10.1 lxc-debuginfo-3.1.0-lp150.2.10.1 lxc-debugsource-3.1.0-lp150.2.10.1 lxcfs-3.0.3-lp150.2.3.1 lxcfs-debuginfo-3.0.3-lp150.2.3.1 lxcfs-debugsource-3.0.3-lp150.2.3.1 pam_cgfs-3.1.0-lp150.2.10.1 pam_cgfs-debuginfo-3.1.0-lp150.2.10.1 - openSUSE Leap 15.0 (noarch): lxc-bash-completion-3.1.0-lp150.2.10.1 lxcfs-hooks-lxc-3.0.3-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-6556.html https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1122185 https://bugzilla.suse.com/1131762 https://bugzilla.suse.com/988348 -- . Essential openSUSE upgrade tackles container escape vulnerabilities found in lxc and lxcfs, along with fixes to critical security flaws.. lxc containers, lxcfs update, openSUSE advisory, container security. . Severity: Important. LinuxSecurity.com Team
Apr 25, 2019
•Important
OpenSUSE
202
security advisoryimportantsetuidopenSUSE: 2019:1227-1 Important: lxc and lxcfs Security Issues
An update that solves two vulnerabilities and has one errata is now available.. openSUSE Security Update: Security update for lxc, lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1227-1 Rating: important References: #1122185 #1131762 #988348 Cross-References: CVE-2018-6556 CVE-2019-5736 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for lxc, lxcfs to version 3.1.0 fixes the following issues: Security issues fixed: - CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185). - CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348). Non-security issues fixed: - Update to LXC 3.1.0. The changelog is far too long to include here, please look at https://linuxcontainers.org/. (boo#1131762) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1227=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): liblxc-devel-3.1.0-bp150.5.3.1 liblxc1-3.1.0-bp150.5.3.1 lxc-3.1.0-bp150.5.3.1 lxcfs-3.0.3-bp150.3.3.1 lxcfs-debuginfo-3.0.3-bp150.3.3.1 lxcfs-debugsource-3.0.3-bp150.3.3.1 pam_cgfs-3.1.0-bp150.5.3.1 - openSUSE Backports SLE-15 (noarch): lxc-bash-completion-3.1.0-bp150.5.3.1 lxcfs-hooks-lxc-3.0.3-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-6556.html https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1122185 https://bugzilla.suse.com/1131762 https://bugzilla.suse.com/988348 -- . Vital openSUSE patch tackles lxc and lxcfs vulnerabilities, implementing essential corrections and improvements for bolstered security measures.. openSUSE Update, lxc Security Fix, lxcfs Update, Container Security, lxc Vulnerability. . Severity: Important. LinuxSecurity.com Team
Apr 17, 2019
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!