(RHSA-2015:0776) Moderate: docker security update

Docker is a service providing container management on Linux.

It was found that the fix for the CVE-2014-5277 issue was incomplete: the
docker client could under certain circumstances erroneously fall back to
HTTP when an HTTPS connection to a registry failed. This could allow a
man-in-the-middle attacker to obtain authentication and image data from
traffic sent from a client to the registry. (CVE-2015-1843)

Red Hat would like to thank Eric Windisch of Docker Inc. for reporting
this issue.

All docker users are advised to upgrade to these updated packages, which
correct this issue.