Linux News Today: LXCFS Vulnerabilities Fixed in Ubuntu 15.10 and Ubuntu 15.04
A couple of LXCFS vulnerabilities have been found and repaired in the Ubuntu 15.10 and Ubuntu 15.04 operating systems.
The LXCFS (FUSE based filesystem for LXC) maintainers have been quick to push a small update for this package and it looks like it’s not a big problem. This doesn’t affect all the Ubuntu systems, just the latest
“It was discovered that LXCFS incorrectly enforced directory escapes or checked certain permissions. A local attacker could use this issue to possibly escalate privileges,” reads the security notice.
These are the two issues identified with the Qt packages. For a more detailed description of the problem, you should check the entire security notification.
The flaws can be fixed if you upgrade your system to the latest lxcf packages. To apply the patch, users will have to run the Update Manager application. In general, a standard system update will make all the necessary changes, and there is no need for a restart.
You can also use the terminal and enter the following commands (you will need to be root in order to make it work):
sudo apt-get update
sudo apt-get dist-upgrade
It’s usually a good idea to upgrade the system on a regular basis. This is not big upgrade and it should be very small, but if you haven’t upgraded the system in a while it might take longer to complete.