Docker: Multiple vulnerabilities — GLSA 202107-23

Multiple vulnerabilities have been found in Docker, the worst of which could result in privilege escalation to root on the host.

Package	app-emulation/docker on all architectures
Affected versions	< 20.10.3
Unaffected versions	>= 19.03.15 >= 20.10.3

Docker is the world’s leading software containerization platform.

Multiple vulnerabilities have been discovered in Docker. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All Docker 19.x users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-emulation/docker-19.03.15"

All Docker 20.x users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-emulation/docker-20.10.3"

Release date
July 10, 2021

Latest revision
July 10, 2021: 1

Severity
normal

Exploitable
local

Bugzilla entries