Skip to content
OpenAdvisories
Unscored RHSA-2020:2653 3 CVEs

Red Hat Security Advisory: docker security update

Published Sep 13, 2024 · Updated Nov 22, 2025

Fixed packages 9

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker 2:1.13.1-162.git64e9980.el7_8
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-client 2:1.13.1-162.git64e9980.el7_8
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-common 2:1.13.1-162.git64e9980.el7_8
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-debuginfo 2:1.13.1-162.git64e9980.el7_8
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-logrotate 2:1.13.1-162.git64e9980.el7_8
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-lvm-plugin 2:1.13.1-162.git64e9980.el7_8
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-novolume-plugin 2:1.13.1-162.git64e9980.el7_8
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-rhel-push-plugin 2:1.13.1-162.git64e9980.el7_8
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 docker-v1.10-migrator 2:1.13.1-162.git64e9980.el7_8

Vulnerabilities 3

  • Unscored —

    Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images…

  • Unscored —

    The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorre…

  • Unscored —

    The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/security/vulnerabilities/runc-regression-docker-1.13.1-108
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1390163
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1848239
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1848829
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2653.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-8867
  • article
    https://access.redhat.com/security/vulnerabilities/runc-regression-docker
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8867
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8867
  • report
    https://access.redhat.com/security/cve/CVE-2020-14298
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14298
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14298
  • report
    https://access.redhat.com/security/cve/CVE-2020-14300
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14300
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14300