diff -up ./libpod-1.4.2-stable2/vendor/github.com/containers/image/docker/docker_client.go.CVE-2019-10214 ./libpod-1.4.2-stable2/vendor/github.com/containers/image/docker/docker_client.go --- ./libpod-1.4.2-stable2/vendor/github.com/containers/image/docker/docker_client.go.CVE-2019-10214 2019-09-12 15:17:12.911343773 +0200 +++ ./libpod-1.4.2-stable2/vendor/github.com/containers/image/docker/docker_client.go 2019-09-12 15:17:12.912343786 +0200 @@ -523,11 +523,7 @@ func (c *dockerClient) getBearerToken(ct authReq.SetBasicAuth(c.username, c.password) } logrus.Debugf("%s %s", authReq.Method, authReq.URL.String()) - tr := tlsclientconfig.NewTransport() - // TODO(runcom): insecure for now to contact the external token service - tr.TLSClientConfig = &tls.Config{InsecureSkipVerify: true} - client := &http.Client{Transport: tr} - res, err := client.Do(authReq) + res, err := c.client.Do(authReq) if err != nil { return nil, err }