Lucene search

K
suseSuseSUSE-SU-2015:1757-1
HistoryOct 15, 2015 - 1:26 p.m.

Security update for docker (important)

2015-10-1513:26:51
lists.opensuse.org
5

0.002 Low

EPSS

Percentile

56.2%

docker was updated to version 1.8.3 to fix two security issues.

These security issues were fixed:

  • CVE-2014-8178: Manipulated layer IDs could have lead to local graph
    poisoning (bsc#949660).
  • CVE-2014-8179: Manifest validation and parsing logic errors allowed
    pull-by-digest validation bypass (bsc#949660).

This non-security issues was fixed:

  • Add --disable-legacy-registry to prevent a daemon from using a v1
    registry

More information about docker 1.8.3 can be found at
<a href=“https://blog.docker.com/2015/10/security-release-docker-1-8-3-1-6-2-cs7/”>https://blog.docker.com/2015/10/security-release-docker-1-8-3-1-6-2-cs7/</a>