Red Hat Security Advisory

RHSA-2016:2634

docker security and bug fix update

Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras docker-1.10.3-57.el7, docker-common-1.10.3-57.el7, docker-logrotate-1.10.3-57.el7 +5

Fixes 1 record

TI-2016-03129 CVE-2016-3697 · GHSA-q3j5-32m5-58c2

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2…

LOW 34

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00388 Published 2016-06-01 Partial fix · 0.1.0 CWE-264