Stay Secure with the Latest Linux Advisories

security advisoryFedoraprivilege escalation

Fedora 25: 2017-0200646669 Critical: runc Seccomp Enhancement and Fixes

Resolves: #1412238 - *CVE-2016-9962* - set init processes as non-dumpable, ---- patch to enable seccomp ---- bump to 1.0.0 rc2 ---- Resolves: #1342707 - bump to v1.0.0-rc1. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-0200646669 2017-01-19 02:47:00.985504 -------------------------------------------------------------------------------- Name : runc Product : Fedora 25 Version : 1.0.0 Release : 3.rc2.gitc91b5be.fc25 URL : https://github.com/opencontainers/runc Summary : CLI for running Open ContainersDescription : The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc. -------------------------------------------------------------------------------- Update Information: Resolves: #1412238 - *CVE-2016-9962* - set init processes as non-dumpable, ---- patch to enable seccomp ---- bump to 1.0.0 rc2 ---- Resolves: #1342707 - bump to v1.0.0-rc1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1412238 - CVE-2016-9962 runc: docker: insecure opening of file-descriptor allows privilege escalation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1412238 [ 2 ] Bug #1342707 - runc-v1.0.0-rc1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1342707 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade runc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . The recent upgrade for runc on Fedora 25 addresses vulnerabilities and improves the management of container processes.. Fedora 25 Security, runc Update, seccomp Management, privilege escalation Fix. . Severity: Critical. LinuxSecurity.com Team

Jan 19, 2017 •Critical Fedora