Red Hat Security Advisory

RHSA-2016:1034

docker security, bug fix, and enhancement update

Released 2016-05-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras docker-1.9.1-40.el7, docker-common-1.9.1-40.el7, docker-forward-journald-1.9.1-40.el7 +2

Fixes 1 record

TI-2016-03129 CVE-2016-3697 · GHSA-q3j5-32m5-58c2

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2…

LOW 34

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00388 Published 2016-06-01 Partial fix · 0.1.0 CWE-264