Slackware64-14.2 ChangeLog (2019-02-13)

Wed Feb 13 23:01:59 UTC 2019

Wed Feb 13 00:22:29 UTC 2019

  • patches/packages/lxc-2.0.9_d3a03247-x86_64-1_slack14.2.txz
    This update fixes a security issue where a malicious privileged container
    could overwrite the host binary and thus gain root-level code execution on
    the host. As the LXC project considers privileged containers to be unsafe
    no CVE has been assigned for this issue for LXC. To prevent this attack,
    LXC has been patched to create a temporary copy of the calling binary
    itself when it starts or attaches to containers. To do this LXC creates an
    anonymous, in-memory file using the memfd_create() system call and copies
    itself into the temporary in-memory file, which is then sealed to prevent
    further modifications. LXC then executes this sealed, in-memory file
    instead of the original on-disk binary.
    For more information, see:
    https://seclists.org/oss-sec/2019/q1/119
    (* Security fix *)
  • news/2019/02/13/slackware64-14.2-changelog.txt
  • Last modified: 5 months ago
  • by Giuseppe Di Terlizzi