Ubuntu 21.10 USN-5134-1: Docker Information Disclosure Threat

ubuntu

November 9, 2021

Docker could be made to expose sensitive information over the network.

Summary

Docker could be made to expose sensitive information over the

network.

Software Description:

- docker.io: Linux container runtime

Details:

An information disclosure issue was discovered in the command line interface

of Docker. A misconfigured credential store could result in supplied

credentials being leaked to the public registry, when using the docker login

command with a private registry.

Topics Covered

security advisory information disclosure ubuntu network threat docker

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
docker.io 20.10.7-0ubuntu5.1

Ubuntu 21.04:
docker.io 20.10.7-0ubuntu5~21.04.2

Ubuntu 20.04 LTS:
docker.io 20.10.7-0ubuntu5~20.04.2

Ubuntu 18.04 LTS:
docker.io 20.10.7-0ubuntu5~18.04.3

In general, a standard system update will make all the necessary changes.