Docker vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
Docker could be made to overwrite files as the administrator.
Software Description
Aleksa Sarai discovered that Docker was vulnerable to a directory traversal attack. An attacker could use this vulnerability to read and write arbitrary files on the host filesystem as root.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 19.04
docker.io - 18.09.7-0ubuntu1~19.04.4
Ubuntu 18.10
docker.io - 18.09.7-0ubuntu1~18.10.3
Ubuntu 18.04 LTS
docker.io - 18.09.7-0ubuntu1~18.04.3
Ubuntu 16.04 LTS
docker.io - 18.09.7-0ubuntu1~16.04.4
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes.
References
Continue reading...
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 19.04
- Ubuntu 18.10
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Docker could be made to overwrite files as the administrator.
Software Description
- docker.io - Linux container runtime
Aleksa Sarai discovered that Docker was vulnerable to a directory traversal attack. An attacker could use this vulnerability to read and write arbitrary files on the host filesystem as root.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 19.04
docker.io - 18.09.7-0ubuntu1~19.04.4
Ubuntu 18.10
docker.io - 18.09.7-0ubuntu1~18.10.3
Ubuntu 18.04 LTS
docker.io - 18.09.7-0ubuntu1~18.04.3
Ubuntu 16.04 LTS
docker.io - 18.09.7-0ubuntu1~16.04.4
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes.
References
Continue reading...
