Packages
- docker.io - Linux container runtime
Details
Aleksa Sarai discovered that Docker was vulnerable to a directory traversal
attack. An attacker could use this vulnerability to read and write arbitrary
files on the host filesystem as root.
Aleksa Sarai discovered that Docker was vulnerable to a directory traversal
attack. An attacker could use this vulnerability to read and write arbitrary
files on the host filesystem as root.
Update instructions
This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 19.04 disco | docker.io – 18.09.7-0ubuntu1~19.04.4 | ||
| 18.10 cosmic | docker.io – 18.09.7-0ubuntu1~18.10.3 | ||
| 18.04 bionic | docker.io – 18.09.7-0ubuntu1~18.04.3 | ||
| 16.04 xenial | docker.io – 18.09.7-0ubuntu1~16.04.4 | ||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.