Aptible: runc Vulnerability Response (CVE-2019-5736)
Timeline of updates
- resolved
Today, a vulnerability (CVE-2019-5736) was announced in runc [0], the container runtime underlying Docker, and by extension, containers run on Aptible Enclave. Our Security Team began investigating the vulnerability and preparing our remediation strategy at 13:30 UTC (8:30am EST) today, February 11. As part of our immediate remediation efforts, we have already upgraded runc across our infrastructure. It is possible, though not expected, that we may perform additional actions to remediate this vulnerability, such as: * Restarting app containers * Restarting database containers (with some downtime) We will update this status page if any such action becomes required. [0] https://seclists.org/oss-sec/2019/q1/119 (opens in new tab)
From Aptible’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.
How the archive is checked, and what it cannot prove.
This incident predates live tracking (October 17, 2026). It came from the vendor’s own published history, which is not covered by checkpoints.
Impact, status and times are the vendor’s own, as last archived. View on status.aptible.com (opens in new tab).
Cite this
Status incident (vendor impact label: none) posted by Aptible, started 2019-02-11 13:30 UTC, resolved after 0 min, 1 update(s).
- Title
- runc Vulnerability Response (CVE-2019-5736)
- Vendor
- Aptible
- Date
- URL
- https://rewindex.com/company/aptible/incidents/z0xqnw294qq5
Aptible profileRecent Aptible incidentsAll outages on February 11, 2019Aptible in February 2019MarkdownJSON