Skip to content
OpenAdvisories
Medium RHSA-2017:0123 1 CVE

Red Hat Security Advisory: docker-latest security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated May 13, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-client-latest 0:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-latest 0:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-latest-logrotate 0:1.12.5-14.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-latest-v1.10-migrator 0:1.12.5-14.el7

Vulnerabilities 1

  • Medium 6.4
    CVE-2016-9962

    Information Exposure in RunC

    RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization a…

    docker.io docker.io runc github.com/opencontainers/runc Debian Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/security/vulnerabilities/cve-2016-9962
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1402086
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404309
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1406500
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1409531
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0123.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9962
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9962
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9962