RHBA-2015:1167

csafUSredhat_csaf

Red Hat Bug Fix Advisory: docker bug fix update

view advisory published 2015-06-23

Updated docker packages that fix several bugs are now available for Red Hat Enterprise Linux 7 Extras.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2015-3631USlow3.6—
Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.
CVE-2015-3630UShigh7.2—
Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host…
CVE-2015-3629UShigh7.8—
Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlin…
CVE-2015-3627UShigh7.2—
Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a sy…
02

references

External citations — patches, advisories, analysis.

03

remediations (28)

  • Fixedatomic-0:0-0.40.gitf863afd.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixedatomic-0:0-0.40.gitf863afd.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixedatomic-0:0-0.40.gitf863afd.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixedatomic-0:0-0.40.gitf863afd.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-0:1.6.2-14.el7.src as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-0:1.6.2-14.el7.src as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-0:1.6.2-14.el7.src as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-0:1.6.2-14.el7.src as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-logrotate-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-logrotate-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-logrotate-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-logrotate-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-python-0:1.0.0-53.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-python-0:1.0.0-53.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-python-0:1.0.0-53.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-python-0:1.0.0-53.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-selinux-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-selinux-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-selinux-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixeddocker-selinux-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixedpython-websocket-client-0:0.14.1-97.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixedpython-websocket-client-0:0.14.1-97.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixedpython-websocket-client-0:0.14.1-97.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
  • Fixedpython-websocket-client-0:0.14.1-97.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:1167
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan