Skip to content
OpenAdvisories
High ELSA-2019-4813 2 CVEs

Important: docker-engine security update (Oracle Linux 7)

Published Oct 3, 2019 · Updated Oct 3, 2019

Ecosystem: Oracle Linux

Summary

[18.09.8-1.0.4]
- Modified version to include ol suffix

[ 18.09.8-1.0.3]
- ol7 image related changes

[ 18.09.8-1.0.2]
- Merge upstream for CVE fixes.

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 docker-engine 0:18.09.8.ol-1.0.4.el7

Vulnerabilities 2

  • High 7.5
    CVE-2019-13509

    Secret insertion into debug log in Docker

    In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a sta…

    docker.io docker github.com/docker/docker Debian Alpine Go
  • Unscored —
    CVE-2019-13139 Public exploit

    In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build"…

    docker.io Debian