RHBA-2015:1167Medium

Red Hat Bug Fix Advisory: docker bug fix update

Published
June 23, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (4)

CVE-2015-3627 →CVE-2015-3629 →CVE-2015-3630 →CVE-2015-3631 →

📋 Description

CVE-2015-3627 — docker: insecure opening of file-descriptor 1 leading to privilege escalation CVE-2015-3629 — docker: symlink traversal on container respawn allows local privilege escalation CVE-2015-3630 — docker: Read/write proc paths allow host modification & information disclosure CVE-2015-3631 — docker: volume mounts allow LSM profile escalation

🎯 Affected products8

  • Red Hat Enterprise Linux 7 Extras
  • atomic-0:0-0.40.gitf863afd.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
  • docker-0:1.6.2-14.el7.src as a component of Red Hat Enterprise Linux 7 Extras
  • docker-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
  • docker-logrotate-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
  • docker-python-0:1.0.0-53.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
  • docker-selinux-0:1.6.2-14.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
  • python-websocket-client-0:0.14.1-97.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (21)