USN-4589-2: Docker vulnerability
15 October 2020
Docker could be made to expose sensitive information over the network.
- docker.io - Linux container runtime
USN-4589-1 fixed a vulnerability in containerd. This update provides
the corresponding update for docker.io.
Original advisory details:
It was discovered that containerd could be made to expose sensitive
information when processing URLs in container image manifests. A
remote attacker could use this to trick the user and obtain the
user's registry credentials.
The problem can be corrected by updating your system to the following package versions:
After a standard system update you need to restart docker to make
all the necessary changes.
- USN-4589-1: golang-github-docker-containerd-dev, containerd