Security update for docker (important)

2014-12-0817:07:52

lists.opensuse.org

0.09 Low

EPSS

Percentile

94.6%

JSON

docker was updated to version 1.3.2 to fix two security issues.

These security issues were fixed:

Symbolic and hardlink issues leading to privilege escalation
(CVE-2014-6407).
Potential container escalation (CVE-2014-6408).

There non-security issues were fixed:

Fix deadlock in docker ps -f exited=1
Fix a bug when --volumes-from references a container that failed to start
–insecure-registry now accepts CIDR notation such as 10.1.0.0/16
Private registries whose IPs fall in the 127.0.0.0/8 range do no need
the --insecure-registry flag
Skip the experimental registry v2 API when mirroring is enabled
Fixed minor packaging issues.

OSVersionArchitecturePackageVersionFilename
openSUSE13.2noarchdocker-zsh-completion< 1.3.2-9.1docker-zsh-completion-1.3.2-9.1.noarch.rpm
openSUSE13.2noarchdocker-bash-completion< 1.3.2-9.1docker-bash-completion-1.3.2-9.1.noarch.rpm
openSUSE13.2x86_64docker< 1.3.2-9.1docker-1.3.2-9.1.x86_64.rpm
openSUSE13.2x86_64docker-debuginfo< 1.3.2-9.1docker-debuginfo-1.3.2-9.1.x86_64.rpm
openSUSE13.2x86_64docker-debugsource< 1.3.2-9.1docker-debugsource-1.3.2-9.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	13.2	noarch	docker-zsh-completion	< 1.3.2-9.1	docker-zsh-completion-1.3.2-9.1.noarch.rpm
openSUSE	13.2	noarch	docker-bash-completion	< 1.3.2-9.1	docker-bash-completion-1.3.2-9.1.noarch.rpm
openSUSE	13.2	x86_64	docker	< 1.3.2-9.1	docker-1.3.2-9.1.x86_64.rpm
openSUSE	13.2	x86_64	docker-debuginfo	< 1.3.2-9.1	docker-debuginfo-1.3.2-9.1.x86_64.rpm
openSUSE	13.2	x86_64	docker-debugsource	< 1.3.2-9.1	docker-debugsource-1.3.2-9.1.x86_64.rpm