docker 1.4.0 available, fixes multiple CVEs - testing/karma needed

[Lokesh Mandvekar]

I've updated docker to 1.4.0 for fedora and fedora epel. This release fixes:
CVE-2014-9357: https://access.redhat.com/security/cve/CVE-2014-9357
CVE-2014-9358: https://access.redhat.com/security/cve/CVE-2014-9358
CVE-2014-9356: https://access.redhat.com/security/cve/CVE-2014-9356

It'd be great if people could test these and add karma/comments:
https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc21
https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc20
https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc19
https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.el6

Thanks!

[M. Edward (Ed) Borasky]

Working here on F21 - karma logged!

On Fri, Dec 12, 2014 at 7:57 AM, Lokesh Mandvekar
 wrote:
> I've updated docker to 1.4.0 for fedora and fedora epel. This release fixes:
> CVE-2014-9357: https://access.redhat.com/security/cve/CVE-2014-9357
> CVE-2014-9358: https://access.redhat.com/security/cve/CVE-2014-9358
> CVE-2014-9356: https://access.redhat.com/security/cve/CVE-2014-9356
>
> It'd be great if people could test these and add karma/comments:
> https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc21
> https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc20
> https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc19
> https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.el6
> Thanks!
>
> Lokesh
> Freenode, OFTC: lsm5
> GPG: 0xC7C3A0DD
>
> --
> devel mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/devel
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[Lokesh Mandvekar]

On Fri, Dec 12, 2014 at 10:14:50AM -0800, M. Edward (Ed) Borasky wrote:
> Working here on F21 - karma logged!

Thanks. Btw, could you also check if things work fine after restarting
docker.service (if not tested already)? I see database locked errors after a
restart on rawhide :\
> On Fri, Dec 12, 2014 at 7:57 AM, Lokesh Mandvekar
>  wrote:
> > I've updated docker to 1.4.0 for fedora and fedora epel. This release fixes:
> > CVE-2014-9357: https://access.redhat.com/security/cve/CVE-2014-9357
> > CVE-2014-9358: https://access.redhat.com/security/cve/CVE-2014-9358
> > CVE-2014-9356: https://access.redhat.com/security/cve/CVE-2014-9356
> >
> > It'd be great if people could test these and add karma/comments:
> > https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc21
> > https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc20
> > https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc19
> > https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.el6
> > Thanks!
> >
> > Lokesh
> > Freenode, OFTC: lsm5
> > GPG: 0xC7C3A0DD
> >
> > --
> > devel mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/devel
> > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
>
> -- 
> Twitter: http://twitter.com/znmeb; OSJourno: Robust Power Tools for
> Digital Journalists https://osjourno.com
> Remember, if you're traveling to Bactria, Hump Day is Tuesday and Thursday.
>
> devel mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/devel
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[Daniel J Walsh]

On 12/12/2014 03:34 PM, Lokesh Mandvekar wrote:
> On Fri, Dec 12, 2014 at 10:14:50AM -0800, M. Edward (Ed) Borasky wrote:
> > Working here on F21 - karma logged!
>
> Thanks. Btw, could you also check if things work fine after restarting
> docker.service (if not tested already)? I see database locked errors after a
> restart on rawhide :\
> > On Fri, Dec 12, 2014 at 7:57 AM, Lokesh Mandvekar
> >  wrote:
> > > I've updated docker to 1.4.0 for fedora and fedora epel. This release fixes:
> > > CVE-2014-9357: https://access.redhat.com/security/cve/CVE-2014-9357
> > > CVE-2014-9358: https://access.redhat.com/security/cve/CVE-2014-9358
> > > CVE-2014-9356: https://access.redhat.com/security/cve/CVE-2014-9356
> > >
> > > It'd be great if people could test these and add karma/comments:
> > > https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc21
> > > https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc20
> > > https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc19
> > > https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.el6
> > > Thanks!
> > >
> > > Lokesh
> > > Freenode, OFTC: lsm5
> > > GPG: 0xC7C3A0DD
> > >
> > > --
> > > devel mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/devel
> > > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> >
> > -- 
> > Twitter: http://twitter.com/znmeb; OSJourno: Robust Power Tools for
> > Digital Journalists https://osjourno.com
> > Remember, if you're traveling to Bactria, Hump Day is Tuesday and Thursday.
> >
> > devel mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/devel
> > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

docker in Rawhide is busted.

According to docker there is a problem with their sqlite go bindings and
golang-1.4.

https://bugzilla.redhat.com/show_bug.cgi?id=1169334

The following temporarily works for me when this situation happens.

rm -f /var/lib/docker/linkgraph.db; systemctl restart docker

Works for me. Although you might need to run this command again when the database gets locked up.