Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker | 2:1.13.1-91.git07f3374.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-client | 2:1.13.1-91.git07f3374.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-common | 2:1.13.1-91.git07f3374.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-debuginfo | 2:1.13.1-91.git07f3374.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-logrotate | 2:1.13.1-91.git07f3374.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-lvm-plugin | 2:1.13.1-91.git07f3374.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-novolume-plugin | 2:1.13.1-91.git07f3374.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-rhel-push-plugin | 2:1.13.1-91.git07f3374.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-v1.10-migrator | 2:1.13.1-91.git07f3374.el7 |
Vulnerabilities 1
-
Unscored —
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc …
References
-
article
https://access.redhat.com/security/vulnerabilities/runcescape
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1664908
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0304.json
-
report
https://access.redhat.com/security/cve/CVE-2019-5736
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-5736
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-5736
-
article
https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html
-
article
https://seclists.org/oss-sec/2019/q1/119