Red Hat Security Advisory

RHSA-2015:0776

docker security update

Released 2015-04-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras atomic-0-0.9.git4ff7dbd.el7, docker-1.5.0-28.el7, docker-logrotate-1.5.0-28.el7 +2

Fixes 1 record

TI-2015-01655 CVE-2015-1843 · GHSA-m568-g4fp-65j5

The Red Hat docker package before 1.5.0-28, when using the --add-registry option, falls…

LOW 23

The Red Hat docker package before 1.5.0-28, when using the --add-registry option, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01618 Published 2015-04-06 Fixed CWE-20