Ubuntu Security Notice 3375-1 - It was discovered that LXC incorrectly handled the TIOCSTI ioctl. An attacker could possibly use this issue to escape LXC containers.
e3ae3fe9f73f26f31cc9cd758967923d7be395b2f923a28622c56e6647f22433
===========================================================================
Ubuntu Security Notice USN-3375-1
August 02, 2017
lxc vulnerability
===========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 LTS
Summary:
LXC would allow unintended access.
Software Description:
- lxc: Linux Containers userspace tools
Details:
It was discovered that LXC incorrectly handled the TIOCSTI ioctl. An
attacker could possibly use this issue to escape LXC containers.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 LTS:
lxc 1.0.10-0ubuntu1.1
After a standard system update you need to restart LXC containers to make
all the necessary changes.
References:
https://www.ubuntu.com/usn/usn-3375-1
CVE-2016-10124
Package Information:
https://launchpad.net/ubuntu/+source/lxc/1.0.10-0ubuntu1.1
--T12pHrXcxeEAfE0jAkJ8ktQssVJfIGgCs--