docker 1.4.0 available, fixes multiple CVEs - testing/karma needed

Daniel J Walsh dwalsh at redhat.com
Sat Dec 13 12:43:12 UTC 2014


On 12/12/2014 03:34 PM, Lokesh Mandvekar wrote:
> On Fri, Dec 12, 2014 at 10:14:50AM -0800, M. Edward (Ed) Borasky wrote:
>> Working here on F21 - karma logged!
> Thanks. Btw, could you also check if things work fine after restarting
> docker.service (if not tested already)? I see database locked errors after a
> restart on rawhide :\
>
>> On Fri, Dec 12, 2014 at 7:57 AM, Lokesh Mandvekar
>> <lsm5 at fedoraproject.org> wrote:
>>> I've updated docker to 1.4.0 for fedora and fedora epel. This release fixes:
>>> CVE-2014-9357: https://access.redhat.com/security/cve/CVE-2014-9357
>>> CVE-2014-9358: https://access.redhat.com/security/cve/CVE-2014-9358
>>> CVE-2014-9356: https://access.redhat.com/security/cve/CVE-2014-9356
>>>
>>> It'd be great if people could test these and add karma/comments:
>>> https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc21
>>> https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc20
>>> https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.fc19
>>> https://admin.fedoraproject.org/updates/docker-io-1.4.0-1.el6
>>>
>>> Thanks!
>>> --
>>> Lokesh
>>> Freenode, OFTC: lsm5
>>> GPG: 0xC7C3A0DD
>>>
>>> --
>>> devel mailing list
>>> devel at lists.fedoraproject.org
>>> https://admin.fedoraproject.org/mailman/listinfo/devel
>>> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
>>
>>
>> -- 
>> Twitter: http://twitter.com/znmeb; OSJourno: Robust Power Tools for
>> Digital Journalists https://osjourno.com
>>
>> Remember, if you're traveling to Bactria, Hump Day is Tuesday and Thursday.
>> -- 
>> devel mailing list
>> devel at lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/devel
>> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
>
>
 docker in Rawhide is busted.

According to docker there is a problem with their sqlite go bindings and
golang-1.4.

https://bugzilla.redhat.com/show_bug.cgi?id=1169334

The following temporarily works for me when this situation happens.

rm -f /var/lib/docker/linkgraph.db; systemctl restart docker

Works for me. Although you might need to run this command again when the database gets locked up.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141213/09fe4e40/attachment.html>


More information about the devel mailing list