SUSE-SU-2015:0984-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2015/suse-su-20150984-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0984-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2015:0984-1
Upstream
Related
Published
2015-05-19T18:41:00Z
Modified
2025-05-02T04:04:34.260092Z
Summary
Security update for docker
Details

The Linux container runtime environment Docker was updated to version 1.6.2 to fix several security and non-security issues.

  • Security:

    • Fix read/write /proc paths. (CVE-2015-3630)
    • Prohibit VOLUME /proc and VOLUME /. (CVE-2015-3631)
    • Fix opening of file-descriptor 1. (CVE-2015-3627)
    • Fix symlink traversal on container respawn allowing local privilege escalation. (CVE-2015-3629)

  • Runtime:

    • Update Apparmor policy to not allow mounts.
References

Affected packages

SUSE:Linux Enterprise Server 12 / docker

Package

Name
docker
Purl
pkg:rpm/suse/docker&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.6.2-31.2

Ecosystem specific 

{
    "binaries": [
        {
            "docker": "1.6.2-31.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0984-1.json"

SUSE:Linux Enterprise Server for SAP Applications 12 / docker

Package

Name
docker
Purl
pkg:rpm/suse/docker&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.6.2-31.2

Ecosystem specific 

{
    "binaries": [
        {
            "docker": "1.6.2-31.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0984-1.json"