[USN-4297-1] runC vulnerabilities
marc.deslauriers at canonical.com
Mon Mar 9 15:44:25 UTC 2020
Ubuntu Security Notice USN-4297-1
March 09, 2020
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 19.10
- Ubuntu 18.04 LTS
Several security issues were fixed in runc.
- runc: Open Container Project
It was discovered that runC incorrectly checked mount targets. An attacker
with a malicious container image could possibly mount over the /proc
directory and escalate privileges. This issue only affected Ubuntu 18.04
It was discovered that runC incorrectly performed access control. An
attacker could possibly use this issue to escalate privileges.
The problem can be corrected by updating your system to the following
Ubuntu 18.04 LTS:
In general, a standard system update will make all the necessary changes.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: OpenPGP digital signature
More information about the ubuntu-security-announce