CVE-2016-0761 Docker Image Host Files Corruption
Cloud Foundry Foundation
Garden linux contains a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container filesystems on the host.
- All Cloud Foundry Garden-Linux versions prior to and including v0.332.0.
- All Elastic Runtime 1.6.x version prior to 1.6.17.
Users of affected versions should apply the following mitigation:
- The Cloud Foundry Foundation recommends that all deployments of Garden-Linux are upgraded to v0.333.0 
- Pivotal recommends that all PCF deployments running Elastic Runtime 1.6.x are upgraded to Elastic Runtime 1.6.17 or higher.
Swisscom / SEC Consult