Docker: Privilege escalation

Background

Docker is the world’s leading software containerization platform.

Description

Docker does not properly distinguish between numeric UIDs and string usernames.

Impact

Local attackers could possibly escalate their privileges.

Workaround

There is no known workaround at this time.

Resolution

All Docker users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-emulation/docker-1.11.0"