Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:2316-1

Опубликовано: 13 авг. 2018
Источник: suse-cvrf

Описание

Security update for lxc

This update for lxc fixes the following issues:

The following security vulnerability was fixed:

  • CVE-2018-6556: Fixed an information leak and possible open() side effects to regular users via lxc-user-nic (boo#988348)

Список пакетов

openSUSE Leap 15.0
liblxc-devel-2.0.9-lp150.2.6.1
liblxc1-2.0.9-lp150.2.6.1
lxc-2.0.9-lp150.2.6.1

Ссылки

Описание

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a (read-only) open of special kernel files (ptmx, proc, sys). Affected releases are LXC: 2.0 versions above and including 2.0.9; 3.0 versions above and including 3.0.0, prior to 3.0.2.

Затронутые продукты
openSUSE Leap 15.0:liblxc-devel-2.0.9-lp150.2.6.1
openSUSE Leap 15.0:liblxc1-2.0.9-lp150.2.6.1
openSUSE Leap 15.0:lxc-2.0.9-lp150.2.6.1
Ссылки