Skip to content
OpenAdvisories
High ELSA-2015-3087 1 CVE

Important: lxc security update (Oracle Linux 7)

Published Oct 15, 2015 · Updated Oct 15, 2015

Ecosystem: Oracle Linux

Summary

[1.0.7-2.0.12]
- [Orabug 22011867] ol6 ct shutdown script remounts /dev/pts/* devices as
ro on host system.

[1.0.7-2.0.11]
- [Orabug 21842483] failed to create directory '/RUN/LXC/LOCK//CONTAINER/OL7.1/SNAPS'
- CVE-2015-1335: Protect container mounts against symlinks.
- Fixed build failure on OL6.

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 lxc 0:1.0.7-2.0.12.el7
Oracle Linux · 7 lxc-devel 0:1.0.7-2.0.12.el7
Oracle Linux · 7 lxc-libs 0:1.0.7-2.0.12.el7

Vulnerabilities 1

  • Unscored —
    CVE-2015-1335

    lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confineme…

    lxc lxc Debian Ubuntu