Affected by GO-2022-0390
and 6 other vulnerabilities
GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker
GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker
GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker
GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker
GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker
GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker
GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker
MultiReadSeeker returns a ReadSeeker that's the logical concatenation of the provided
input readseekers. After calling this method the initial position is set to the
beginning of the first ReadSeeker. At the end of a ReadSeeker, Read always advances
to the beginning of the next ReadSeeker and returns EOF at the end of the last ReadSeeker.
Seek can be used over the sum of lengths of all readseekers.
When a MultiReadSeeker is used, no Read and Seek operations should be made on
its ReadSeeker components. Also, users should make no assumption on the state
of individual readseekers while the MultiReadSeeker is used.