402 matches found
Fedora Update for lxc FEDORA-2016-e5ff0ed40c
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3136-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3136-1: LXC vulnerability
Roman Fiedler discovered a directory traversal flaw in lxc-attach. An attacker with access to an LXC container could exploit this flaw to access files outside of the container...
CVE-2016-8649
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat family of syscalls...
UBUNTU-CVE-2016-8649
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat family of syscalls...
Ubuntu 14.04 LTS / 16.04 LTS : LXC vulnerability (USN-3136-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3136-1 advisory. Roman Fiedler discovered a directory traversal flaw in lxc-attach. An attacker with access to an LXC container could exploit this flaw to access files...
Fedora 24 : libvirt (2016-65cc608ebe)
Rebased to version 1.3.3.2 - Fix xen default video device config bz 1336629 - Don't reject duplicate disk serials bz 1349895 - Fix LXC cgroup name mismatch bz 1350139 - Fix managed save/restore with VM USB Keyboard bz 1353222 - Missing dep on systemd-container bz 1355784 - CVE-2016-5008: Setting...
DEBIAN-CVE-2016-3096
The createscript function in the lxccontainer module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /opt/.lxc-attach-script, 2 the archived container in the archivepath directory, or the 3...
UBUNTU-CVE-2016-3096
The createscript function in the lxccontainer module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /opt/.lxc-attach-script, 2 the archived container in the archivepath directory, or the 3...
PYSEC-2016-1
The createscript function in the lxccontainer module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /opt/.lxc-attach-script, 2 the archived container in the archivepath directory, or the 3...
PT-2016-5367
Name of the Vulnerable Software and Affected Versions Ansible versions prior to 1.9.6-1 Ansible versions 2.x prior to 2.0.2.0 Description The issue allows local users to write to arbitrary files or gain privileges via a symlink attack on several files and directories, including...
Fedora 21 : lxc-1.0.7-4.fc21 (2015-ebfe46536f)
lxc-1.0.7-4.fc21 - Add some patches: - Allow building on EPEL6. - Fix boot-order similar to rhbz1263612. - Prevent lxc-top crash rhbz1152384 . - Set lxc.kmsg = 0 in the config rhbz1204389 . - Use 'overlay' as fs name when needed rhbz1217516 . - Add dependency on rsync rhbz1177981 . Note that...
Fedora 22 : lxc-1.1.4-2.fc22 (2015-211974138f)
Update LXC to the latest stable release. The full list of changes can be found here. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 23 : lxc-1.1.4-2.fc23 (2015-9f8f4b182a)
Update LXC to the latest stable release. The full list of changes can be found here. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Debian DLA-442-1 : lxc security update
Brief introduction CVE-2013-6441 The template script lxc-sshd used to mount itself as /sbin/init in the container using a writable bind-mount. This update resolved the above issue by using a read-only bind-mount instead preventing any form of potentially accidental damage. CVE-2015-1335 On...
[SECURITY] [DLA 442-1] lxc security update
Package : lxc Version : 0.7.2-1+deb6u1 CVE ID : CVE-2013-6441 CVE-2015-1335 Debian Bug : 800471 Brief introduction CVE-2013-6441 The template script lxc-sshd used to mount itself as /sbin/init in the container using a writable bind-mount. This update resolved the above issue by using a read-only...
DLA-442-1 lxc - security update
Bulletin has no description...
Mageia: Security Advisory (MGASA-2016-0036)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
