RunC Flaw Lets Attackers Escape Linux Containers to Gain Root on Hosts

Installation Home Assistant OS
1

Will this issue be addressed in a not too distant future release?

https://www.openwall.com/lists/oss-security/2019/02/11/2

2

I was told by a dev that Hassio does not include the exec command that is needed to take advantage of this flaw, but it will be patched regardless.

3

Already fixed in most Ubuntu-based systems using docker and runc.

https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-5736.html

If you have Unattended Upgrades enabled (the default is Enabled since 16.04), then you likely have the fix already.