ELSA-2014-3110

ELSA-2014-3110 - docker security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2014-12-30

Description

[1.3.3-1.0.1]
- Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel
- Restore SysV init scripts for Oracle Linux 6
- Require Oracle Unbreakable Enterprise Kernel Release 3 or higher
- Rename as docker.
- Re-enable btrfs graphdriver support

[1.3.3-1]
- Update source to 1.3.3 from https://github.com/docker/docker/releases/tag/v1.3.3
Path traversal during processing of absolute symlinks (CVE-2014-9356)
Escalation of privileges during decompression of LZMA (.xz) archives (CVE-2014-9357)

Related CVEs

CVE-2014-9356

CVE-2014-9357

CVE-2014-9358

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (x86_64)	docker-1.3.3-1.0.1.el6.src.rpm	a5b7ff6fef5a2a8a6a2b2e8c9a54b625	ELSA-2015-3037
	docker-1.3.3-1.0.1.el6.x86_64.rpm	ff35dc0506c4d4865a4459796bcbf84e	ELSA-2015-3037
	docker-devel-1.3.3-1.0.1.el6.x86_64.rpm	7a00f67f07a55033b7eed2346ad47efa	ELSA-2015-3037
	docker-pkg-devel-1.3.3-1.0.1.el6.x86_64.rpm	dd4e2c208784d0281bfa1abff55e4121	ELSA-2015-3037
Oracle Linux 7 (x86_64)	docker-1.3.3-1.0.1.el7.src.rpm	31834990525c1964b68f9528248e8d75	ELSA-2015-3037
	docker-1.3.3-1.0.1.el7.x86_64.rpm	779a050f4e08aaae4165c9fd7f3896d0	ELSA-2015-3037
	docker-devel-1.3.3-1.0.1.el7.x86_64.rpm	156b3bb78b1866ea602ee7e509a61ddc	ELSA-2015-3037
	docker-pkg-devel-1.3.3-1.0.1.el7.x86_64.rpm	f5d83242836f58ce50a92df29f32e95c	ELSA-2015-3037

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team