Don't forget to update any Docker instances of OS's. My brother just challenged me and I'd assumed my Docker Ubuntu instances would be updated automatically by

Don't forget to update any Docker instances of OS's. My brother just challenged me and I'd assumed my Docker Ubuntu instances would be updated automatically by updating the main Ubuntu OS but that was not the case. In my defense I'm still new to Docker. I also used this to list my containers: docker ps -la -n=100 And removed them all, then listed images: docker images And removed them and then ran this to get the latest ubuntu installed from docker: docker run -i -t ubuntu /bin/bash Then when inside the container ran: env X="() { :;} ; echo busted" `which bash` -c "echo completed" The new docker image of ubuntu is still vulnerable. Edit: Updating the container then committing it (Docker terminology) should ensure that container stays updated, though any new runs creating new containers would continue to be vulnerable I suspect until Docker patches them or whomever would be responsible to do so.