Lucene search
Gentoo FoundationMGASA-2016-0043HistoryFeb 05, 2016 - 8:26 p.m.
Updated docker/golang packages fix security vulnerability
2016-02-0520:26:09
Gentoo Foundation
advisories.mageia.org
10
0.002 Low
EPSS
Percentile
55.7%
Manipulated layer IDs could have lead to local graph poisoning (CVE-2014-8178). Manifest validation and parsing logic errors allowed pull-by-digest validation bypass (CVE-2014-8179). To fix these issues, the golang package has been updated to version 1.4.3 and the docker package has been updated to version 1.9.1.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 5 | noarch | docker | < 1.9.1-1 | docker-1.9.1-1.mga5 |
| Mageia | 5 | noarch | golang | < 1.4.3-1 | golang-1.4.3-1.mga5 |
Related
oraclelinux
oraclelinux
docker-engine security update
2015-10-14 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2015-3085)
2015-10-15 00:00:00
Mageia: Security Advisory (MGASA-2016-0043)
2016-02-08 00:00:00
Docker < 1.8.3 Multiple Vulnerabilities
2021-09-08 00:00:00
nessus
nessus
Oracle Linux 6 / 7 : docker-engine (ELSA-2015-3085)
2015-10-15 00:00:00
openSUSE Security Update : docker (openSUSE-2015-666)
2015-10-19 00:00:00
openSUSE Security Update : docker (openSUSE-2015-792)
2015-11-24 00:00:00
suse
suse
Security update for docker (important)
2015-10-15 13:26:51
cbl_mariner
cbl_mariner
CVE-2014-8179 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
CVE-2014-8178 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
cvelist
cvelist
CVE-2014-8178
2019-12-04 15:05:02
CVE-2014-8179
2019-12-04 15:10:35
prion
prion
Input validation
2019-12-17 18:15:00
Command injection
2019-12-17 14:15:00
cve
cve
CVE-2014-8179
2019-12-17 18:15:00
CVE-2014-8178
2019-12-17 14:15:00
debiancve
debiancve
CVE-2014-8179
2019-12-17 18:15:00
CVE-2014-8178
2019-12-17 14:15:00
ubuntucve
ubuntucve
CVE-2014-8178
2019-12-17 00:00:00
CVE-2014-8179
2019-12-17 00:00:00
veracode
veracode
Image Cache Poisoning
2019-12-18 02:22:04