[PLUG] runc/docker hole

[jeff <jeffv@op.net>]

https://www.zdnet.com/article/doomsday-docker-security-hole-uncovered/

How bad is this? As bad as you can imagine. Scott McCarty, Red Hat 
technical product manager for containers, warned:

    The disclosure of a security flaw (CVE-2019-5736) in runc and 
docker illustrates a bad scenario for many IT administrators, managers, 
and CxOs. Containers represent a move back toward shared systems where 
applications from many different users all run on the same Linux host. 
Exploiting this vulnerability means that malicious code could 
potentially break containment, impacting not just a single container, 
but the entire container host, ultimately compromising the 
hundreds-to-thousands of other containers running on it. While there are 
very few incidents that could qualify as a doomsday scenario for 
enterprise IT, a cascading set of exploits affecting a wide range of 
interconnected production systems qualifies...and that's exactly what 
this vulnerability represents."
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug