Red Hat Security Advisory: docker security and bug fix update
An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-3697US | high7.8 | — | ||
libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privilege… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2016:2634self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1303123external
- 1329450external
- 1330141external
- 1335951external
- 1336857external
- 1346185external
Behebungen (9)
- Behobendocker-0:1.10.3-57.el7.src as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634 - Behobendocker-0:1.10.3-57.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634 - Behobendocker-common-0:1.10.3-57.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634 - Behobendocker-logrotate-0:1.10.3-57.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634 - Behobendocker-lvm-plugin-0:1.10.3-57.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634 - Behobendocker-novolume-plugin-0:1.10.3-57.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634 - Behobendocker-rhel-push-plugin-0:1.10.3-57.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634 - Behobendocker-selinux-0:1.10.3-57.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634 - Behobendocker-v1.10-migrator-0:1.10.3-57.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:2634
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan