Security update for lxc, lxcfs
This update for lxc, lxcfs to version 3.1.0 fixes the following issues: Security issues fixed: - CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185). - CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348). Non-security issues fixed: - Update to LXC 3.1.0. The changelog is far too long to include here, please look at https://linuxcontainers.org/. (boo#1131762)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for lxc, lxcfs to version 3.1.0 fixes the following issues: Security issues fixed: - CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185). - CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348). Non-security issues fixed: - Update to LXC 3.1.0. The changelog is far too long to include here, please look at https://linuxcontainers.org/. (boo#1131762)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1122185
- https://bugzilla.suse.com/1131762
- https://bugzilla.suse.com/988348
- https://lists.opensuse.org/archives/list/[email protected]/thread/BJSZ5D42JWJHGJ7ILFBWQ7TUHJTZDYJB/#BJSZ5D42JWJHGJ7ILFBWQ7TUHJTZDYJB
- https://www.suse.com/security/cve/CVE-2018-6556
- https://www.suse.com/security/cve/CVE-2019-5736