Ubuntu Security Notice 3730-1 - Matthias Gerstner discovered that LXC incorrectly handled the lxc-user-nic utility. A local attacker could possibly use this issue to open arbitrary files.
20b451992a911148667d7967308162587130dc75ed9ecbf9dd9cb11668d1038b
==========================================================================
Ubuntu Security Notice USN-3730-1
August 06, 2018
lxc vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
Summary:
LXC would allow unintended access to files.
Software Description:
- lxc: Linux Containers userspace tools
Details:
Matthias Gerstner discovered that LXC incorrectly handled the lxc-user-nic
utility. A local attacker could possibly use this issue to open arbitrary
files.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.04 LTS:
lxc 3.0.1-0ubuntu1~18.04.2
After a standard system update you need to restart LXC containers to make
all the necessary changes.
References:
https://usn.ubuntu.com/usn/usn-3730-1
CVE-2018-6556
Package Information:
https://launchpad.net/ubuntu/+source/lxc/3.0.1-0ubuntu1~18.04.2