Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:2245-1

Опубликовано: 03 окт. 2019
Источник: suse-cvrf

Описание

Security update for lxc

This update for lxc fixes the following issues:

Update to lxc 3.2.1. The changelog can be found at

https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322

  • seccomp: support syscall forwarding to userspace
  • add lxc.seccomp.allow_nesting
  • pidfd: Add initial support for the new pidfd api
  • Many hardening improvements.
  • Use /sys/kernel/cgroup/delegate file for cgroup v2.
  • Fix CVE-2019-5736 equivalent bug.
  • fix apparmor dropin to be compatible with LXC 3.1.0 (boo#1131762)

Список пакетов

openSUSE Leap 15.1
liblxc-devel-3.2.1-lp151.4.5.1
liblxc1-3.2.1-lp151.4.5.1
lxc-3.2.1-lp151.4.5.1
lxc-bash-completion-3.2.1-lp151.4.5.1
pam_cgfs-3.2.1-lp151.4.5.1

Ссылки

Описание

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.

Затронутые продукты
openSUSE Leap 15.1:liblxc-devel-3.2.1-lp151.4.5.1
openSUSE Leap 15.1:liblxc1-3.2.1-lp151.4.5.1
openSUSE Leap 15.1:lxc-3.2.1-lp151.4.5.1
openSUSE Leap 15.1:lxc-bash-completion-3.2.1-lp151.4.5.1
Ссылки