Affected by GO-2022-0390
and 6 other vulnerabilities
GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker
GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker
GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker
GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker
GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker
GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker
GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker
Get returns the home directory of the current user with the help of
environment variables depending on the target operating system.
Returned path should be used with "path/filepath" to form new paths.
GetStatic returns the home directory for the current user without calling
os/user.Current(). This is useful for static-linked binary on glibc-based
system, because a call to os/user.Current() in a static binary leads to
segfault due to a glibc issue that won't be fixed in a short term.
(#29344, golang/go#13470, https://sourceware.org/bugzilla/show_bug.cgi?id=19341)