RHSA-2019:4074: Moderate: OpenShift Container Platform 4.2 runc security update
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.This advisory contains the runc RPM package for Red Hat OpenShift Container Platform 4.2.9. The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides a container runtime.Security Fix(es): runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc (CVE-2019-16884) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/runcto a version that resolves this vulnerability.Fixed in 1.0.0-63.rc8.el8 - Upgrade
Upgrade
redhat/runc-debuginfoto a version that resolves this vulnerability.Fixed in 1.0.0-63.rc8.el8 - Upgrade
Upgrade
redhat/runc-debugsourceto a version that resolves this vulnerability.Fixed in 1.0.0-63.rc8.el8 - Upgrade
Upgrade
OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.2.9
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:4074?
The severity of RHSA-2019:4074 is classified as moderate.
How do I fix RHSA-2019:4074?
To fix RHSA-2019:4074, update the runc package to version 1.0.0-63.rc8.el8.
Which versions of runc are affected by RHSA-2019:4074?
RHSA-2019:4074 affects all versions of the runc package prior to 1.0.0-63.rc8.el8.
What package does RHSA-2019:4074 involve?
RHSA-2019:4074 involves the runc RPM package used in Red Hat OpenShift Container Platform.
Is RHSA-2019:4074 related to specific architectures?
Yes, RHSA-2019:4074 specifically mentions the el8 and x86_64 qualifiers for the runc package.