Skip to content
OpenAdvisories
Medium RHSA-2017:0116 1 CVE

Red Hat Security Advisory: docker security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated May 13, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 container-selinux 2:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker 2:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-client 2:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-common 2:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-logrotate 2:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-lvm-plugin 2:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-novolume-plugin 2:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-rhel-push-plugin 2:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-v1.10-migrator 2:1.12.5-14.el7

Vulnerabilities 1

  • Medium 6.4
    CVE-2016-9962

    Information Exposure in RunC

    RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization a…

    docker.io docker.io runc github.com/opencontainers/runc Debian Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/security/vulnerabilities/cve-2016-9962
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1316786
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1341760
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1346206
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1360195
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1364238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1373952
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1385924
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1388585
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1389442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393816
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1395401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1399398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400228
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1400372
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1403264
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1403270
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1403370
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1403843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404298
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404372
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405306
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405464
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405888
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405989
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1406446
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1409531
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1410434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1412385
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0116.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9962
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9962
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9962