The host and the Docker container use the same kernel, so applying the security patch to the host should be enough, right?
Example: the CVE-2021-33909 vunerability: https://ubuntu.com/security/CVE-2021-33909. On Ubuntu, running apt-get update && apt-get dist-upgrade && reboot on the hosthost is enough?