Ubuntu Security Notice 4103-1 - Jasiel Spelman discovered that a double free existed in docker-credential- helpers. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
e7e4bdf09b9ea9f7a49ec0c2f8ba123043c13dc59b323fc09ce4fe8af95f7f5d
==========================================================================
Ubuntu Security Notice USN-4103-1
August 19, 2019
docker-credential-helpers vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 19.04
Summary:
docker-credential-helpers could be made to crash or run programs as your login
Software Description:
- golang-github-docker-docker-credential-helpers: Use native stores to safeguard
Docker credentials
Details:
Jasiel Spelman discovered that a double free existed in docker-credential-
helpers. A local attacker could use this to cause a denial of service
(crash) or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.04:
golang-docker-credential-helpers 0.6.1-1ubuntu0.1
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4103-1
CVE-2019-1020014
Package Information:
https://launchpad.net/ubuntu/+source/golang-github-docker-docker-credential-helpers/0.6.1-1ubuntu0.1