The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade docker-lvm-pluginUpgrade docker-novolume-pluginUpgrade docker-debuginfoUpgrade dockerUpgrade docker-v1.10-migratorUpgrade docker-rhel-push-pluginUpgrade docker-logrotateUpgrade docker-commonUpgrade docker-client | Jun 24, 2020 | Oct 28, 2016 |
| Docker | — | Upgrade to Docker v1.12.3 | May 4, 2017 | Oct 28, 2016 |
| Oracle_linux | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jan 14, 2017 | Oct 28, 2016 |
| Redhat_linux | — | Upgrade dockerUpgrade docker-lvm-pluginUpgrade docker-novolume-pluginUpgrade docker-debuginfoUpgrade docker-v1.10-migratorUpgrade docker-logrotateUpgrade docker-clientUpgrade docker-rhel-push-pluginUpgrade docker-common | Jun 24, 2020 | Oct 28, 2016 |
| Suse | — | Upgrade runcUpgrade dockerUpgrade containerdUpgrade docker-fish-completionUpgrade docker-bash-completionUpgrade ruby2.1-rubygem-exconUpgrade ruby2.1-rubygem-docker-api | Dec 5, 2016 | Oct 28, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 28, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub