ALT-PU-2016-1817: package runc update to version 1.0.0-alt1.git04f275d
Описание
This update upgrades runc to version 1.0.0-alt1.git04f275d.
Устраненные уязвимости7
Ссылки4
GHSA-c3xm-pvg7-gh7r
https://github.com/advisories/GHSA-c3xm-pvg7-gh7rGHSA-fgv8-vj5c-2ppq
https://github.com/advisories/GHSA-fgv8-vj5c-2ppqGHSA-fh74-hm69-rqjw
https://github.com/advisories/GHSA-fh74-hm69-rqjwСвязанные уязвимости
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
runc through 1.0.0-rc8 as used in Docker through 19.03.2-ce and other products allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets and thus a malicious Docker image can mount over a /proc directory.