Docker is the world’s leading software containerization platform.
It was found that Docker created network bridges which by default accept IPv6 router advertisements.
An attacker who gained access to a container with CAP_NET_RAW capability may be able to to spoof router advertisements, resulting in information disclosure or denial of service.
There is no known workaround at this time.
All Docker users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/docker-19.03.12"