SUSE-SU-2019:0385-1

Details

Description of the patch:

This update for docker-runc fixes the following issues:

Security issue fixed:

CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout (bsc#1121967)

Affected Packages

docker-runc

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Containers 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

1.0.0rc5+gitr3562_69663f0bd4b6-1.9.1

References

ADVISORY

https://bugzilla.suse.com/1121967

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-February/005114.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-5736/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20190385-1/