High ELSA-2019-4827 2 CVEs

Important: docker-engine docker-cli security update (Oracle Linux 7)

Published Dec 5, 2019 · Updated Dec 5, 2019

Ecosystem: Oracle Linux

Summary

docker-engine
[19.03.1-1.0.0]
- update to 19.03.1

[19.03-0.0.1]
- update to 19.03

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	docker-cli	0:19.03.1.ol-1.0.0.el7
Oracle Linux · 7	docker-engine	0:19.03.1.ol-1.0.0.el7

Vulnerabilities 2

Critical 9.8

CVE-2019-14271 Public exploit EPSS 19%

Moby Docker cp broken with debian containers

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

docker.io docker github.com/docker/docker github.com/moby/moby Debian Alpine Go

Jul 29, 2019
Unscored —

CVE-2018-15664

In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange…

docker.io docker.io docker Debian Ubuntu Alpine

May 23, 2019