In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade docker | Aug 22, 2024 | Jul 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade docker | Jul 4, 2022 | Jul 18, 2019 |
| Amazon_linux | — | Upgrade docker | Nov 7, 2019 | Jul 18, 2019 |
| Debian | — | Upgrade docker.io | Oct 24, 2019 | Jul 18, 2019 |
| Docker_ce | — | Upgrade Docker CE to version 18.09.8 or later | Nov 25, 2019 | Jul 18, 2019 |
| Docker_ee | — | Upgrade Docker EE to version 18.09.8Upgrade Docker EE to version 17.06.3Upgrade Docker EE to version 18.03.2 | Nov 25, 2019 | Jul 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Mar 23, 2020 | Jul 18, 2019 |
| Oracle_linux | — | Upgrade docker-engine | Oct 4, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 18, 2019 |
| Suse | — | Upgrade docker-testUpgrade docker-libnetworkUpgrade docker-runcUpgrade docker-zsh-completionUpgrade containerdUpgrade containerd-ctrUpgrade docker-bash-completionUpgrade dockerUpgrade golang-github-docker-libnetworkUpgrade docker-fish-completion | Aug 30, 2019 | Jul 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 18, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub