Affected by GO-2022-0390 and 6 other vulnerabilities

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

oci

package

v17.12.0-ce-rc3+incomp... Latest Latest Go to latest Published: Mar 23, 2020 License: Apache-2.0 Imports: 8 Imported by: 364

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/docker/docker

Documentation ¶

Rendered for

Index ¶

func DefaultLinuxSpec() specs.Spec
func DefaultOSSpec(osName string) specs.Spec
func DefaultSpec() specs.Spec
func DefaultWindowsSpec() specs.Spec
func Device(d *configs.Device) specs.LinuxDevice
func DevicesFromPath(pathOnHost, pathInContainer, cgroupPermissions string) (devs []specs.LinuxDevice, devPermissions []specs.LinuxDeviceCgroup, err error)
func RemoveNamespace(s *specs.Spec, nsType specs.LinuxNamespaceType)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func DefaultLinuxSpec ¶

func DefaultLinuxSpec() specs.Spec

DefaultLinuxSpec create a default spec for running Linux containers

func DefaultOSSpec ¶

func DefaultOSSpec(osName string) specs.Spec

DefaultOSSpec returns the spec for a given OS

func DefaultSpec ¶

func DefaultSpec() specs.Spec

DefaultSpec returns the default spec used by docker for the current Platform

func DefaultWindowsSpec ¶

func DefaultWindowsSpec() specs.Spec

DefaultWindowsSpec create a default spec for running Windows containers

func Device ¶ added in v1.13.0

func Device(d *configs.Device) specs.LinuxDevice

Device transforms a libcontainer configs.Device to a specs.LinuxDevice object.

func DevicesFromPath ¶ added in v1.13.0

func DevicesFromPath(pathOnHost, pathInContainer, cgroupPermissions string) (devs []specs.LinuxDevice, devPermissions []specs.LinuxDeviceCgroup, err error)

DevicesFromPath computes a list of devices and device permissions from paths (pathOnHost and pathInContainer) and cgroup permissions.

func RemoveNamespace ¶ added in v1.13.0

func RemoveNamespace(s *specs.Spec, nsType specs.LinuxNamespaceType)

RemoveNamespace removes the `nsType` namespace from OCI spec `s`

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL