Stay Secure with the Latest Linux Advisories

security advisoryattacksymlink

Mageia: 2020-0103 Security Update for Opencontainers-Runc Critical Issue

Updated opencontainers-runc package fixes security vulnerability: An attacker who controls the container image for two containers that share a volume can race volume mounts during container initialization, by adding a symlink to the rootfs that points to a directory on the . MGASA-2020-0103 - Updated opencontainers-runc packages fix security vulnerability Publication date: 26 Feb 2020 URL: https://advisories.mageia.org/MGASA-2020-0103.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-19921 Updated opencontainers-runc package fixes security vulnerability: An attacker who controls the container image for two containers that share a volume can race volume mounts during container initialization, by adding a symlink to the rootfs that points to a directory on the volume (CVE-2019-19921). References: - https://bugs.mageia.org/show_bug.cgi?id=26173 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/2NWDTSREUDLT3UFYS5SBIVQBS4YRA35A/ - https://www.cve.org/CVERecord?id=CVE-2019-19921 SRPMS: - 7/core/opencontainers-runc-1.0.0-0.rc10.3.1.mga7 . The latest opencontainers-runc update has resolved a vulnerability concerning volume sharing in Mageia. It's important to apply the fix immediately.. Mageia Security Advisory, Opencontainers-Runc Update, Container Security Fix. . Severity: Critical. LinuxSecurity.com Team

Feb 26, 2020 •Critical Mageia