MGASA-2023-0009
- Source
- https://advisories.mageia.org/MGASA-2023-0009.html
- Import Source
- https://advisories.mageia.org/MGASA-2023-0009.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2023-0009
- Related
- Published
- 2023-01-24T07:58:24Z
- Modified
- 2023-01-24T06:29:45Z
- Summary
- Updated docker packages fix security vulnerability
- Details
-
Server side request forgery (CVE-2022-29153)
Bypass primary group restrictions due to a flaw in the supplementary group access setup (CVE-2022-36109)
Imported Nodes/Services Information leak in moby-engine. (CVE-2022-3920)
- References
-
- https://advisories.mageia.org/MGASA-2023-0009.html
- https://bugs.mageia.org/show_bug.cgi?id=30834
- https://docs.docker.com/engine/release-notes/#201018
- https://github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/RQQ4E3JBXVR3VK5FIZVJ3QS2TAOOXXTQ/
- https://docs.docker.com/engine/release-notes/#201020
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VFYXCTLOSESYIP72BUYD6ECDIMUM4WMB/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/RBODKZL7HQE5XXS3SA2VIDVL4LAA5RWH/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / docker
Package
- Name
- docker
- Purl
- pkg:rpm/mageia/docker?distro=mageia-8