Stay Secure with the Latest Linux Advisories

security advisorysoftware updateapparmor

Mageia 7: MGASA-2020-0050 Moderate: AppArmor Bypass in Docker Image

runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory (CVE-2019-16884). . MGASA-2020-0050 - Updated opencontainers-runc packages fix security vulnerability Publication date: 28 Jan 2020 URL: https://advisories.mageia.org/MGASA-2020-0050.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-16884 runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory (CVE-2019-16884). References: - https://bugs.mageia.org/show_bug.cgi?id=25806 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/DGK6IV5JGVDXHOXEKJOJWKOVNZLT6MYR/ - https://www.cve.org/CVERecord?id=CVE-2019-16884 SRPMS: - 7/core/opencontainers-runc-1.0.0-0.rc9.3.mga7 . Recent updates to opencontainers-runc packages fix a vulnerability related to AppArmor, bolstering security for Mageia users. Discover more.. OpenContainers, Mageia Update, AppArmor, Security Issue, Docker Image. . Severity: Important. LinuxSecurity.com Team

Jan 28, 2020 •Important Mageia