USN-4589-1 fixed a vulnerability in containerd. This update provides the corresponding update for docker.io.
Original advisory details:
It was discovered that containerd could be made to expose sensitive information when processing URLs in container image manifests. A remote attacker could use this to trick the user and obtain the user's registry credentials.
{ "availability": "No subscription required", "binaries": [ { "docker-doc": "18.09.7-0ubuntu1~16.04.6", "docker.io": "18.09.7-0ubuntu1~16.04.6", "golang-github-docker-docker-dev": "18.09.7-0ubuntu1~16.04.6", "golang-docker-dev": "18.09.7-0ubuntu1~16.04.6", "vim-syntax-docker": "18.09.7-0ubuntu1~16.04.6" } ] }
{ "availability": "No subscription required", "binaries": [ { "docker-doc": "19.03.6-0ubuntu1~18.04.2", "docker.io": "19.03.6-0ubuntu1~18.04.2", "golang-github-docker-docker-dev": "19.03.6-0ubuntu1~18.04.2", "golang-docker-dev": "19.03.6-0ubuntu1~18.04.2", "vim-syntax-docker": "19.03.6-0ubuntu1~18.04.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "docker-doc": "19.03.8-0ubuntu1.20.04.1", "docker.io": "19.03.8-0ubuntu1.20.04.1", "golang-github-docker-docker-dev": "19.03.8-0ubuntu1.20.04.1", "golang-docker-dev": "19.03.8-0ubuntu1.20.04.1", "vim-syntax-docker": "19.03.8-0ubuntu1.20.04.1" } ] }