Red Hat Security Advisory: OpenShift Container Platform 3.4, 3.5, 3.6, and 3.7 security update

Fixed packages 40

Vulnerabilities 1

• Unscored —
  CVE-2019-5736 Public exploit EPSS 98%

  runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc …

  docker.io runc runc runc Debian Ubuntu Alpine
  Feb 11, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664908
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0408.json
• report
  https://access.redhat.com/security/cve/CVE-2019-5736
• article
  https://access.redhat.com/security/vulnerabilities/runcescape
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5736
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5736
• article
  https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html
• article
  https://seclists.org/oss-sec/2019/q1/119