Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-client | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-common | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-debuginfo | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-logrotate | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-lvm-plugin | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-novolume-plugin | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-rhel-push-plugin | 2:1.13.1-162.git64e9980.el7_8 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | docker-v1.10-migrator | 2:1.13.1-162.git64e9980.el7_8 |
Vulnerabilities 3
-
Unscored —
Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images…
-
Unscored —
The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorre…
-
Unscored —
The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://access.redhat.com/security/vulnerabilities/runc-regression-docker-1.13.1-108
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1390163
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1848239
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1848829
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2653.json
-
report
https://access.redhat.com/security/cve/CVE-2016-8867
-
article
https://access.redhat.com/security/vulnerabilities/runc-regression-docker
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-8867
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-8867
-
report
https://access.redhat.com/security/cve/CVE-2020-14298
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14298
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14298
-
report
https://access.redhat.com/security/cve/CVE-2020-14300
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14300
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14300