cluster

Feb 6, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 27, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 17, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Changes in this version

+ var ErrSwarmCertificatesExpired = errors.New(...)

+ var ErrSwarmLocked = fmt.Errorf(...)

type Cluster

+ func (c *Cluster) AttachNetwork(target string, containerID string, addresses []string) (*network.NetworkingConfig, error)

+ func (c *Cluster) CreateSecret(s types.SecretSpec) (string, error)

+ func (c *Cluster) DetachNetwork(target string, containerID string) error

+ func (c *Cluster) GetNetworksByName(name string) ([]apitypes.NetworkResource, error)

+ func (c *Cluster) GetSecret(id string) (types.Secret, error)

+ func (c *Cluster) GetSecrets(options apitypes.SecretListOptions) ([]types.Secret, error)

+ func (c *Cluster) GetUnlockKey() (string, error)

+ func (c *Cluster) RemoveSecret(id string) error

+ func (c *Cluster) ServiceLogs(ctx context.Context, input string, config *backend.ContainerLogsConfig, ...) error

+ func (c *Cluster) UnlockSwarm(req types.UnlockRequest) error

+ func (c *Cluster) UpdateAttachment(target, containerID string, config *network.NetworkingConfig) error

+ func (c *Cluster) UpdateSecret(id string, version uint64, spec types.SecretSpec) error

+ func (c *Cluster) WaitForDetachment(ctx context.Context, networkName, networkID, taskID, containerID string) error

type Config

+ RuntimeRoot string

Jan 12, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 11, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jan 4, 2017 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 5, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Nov 23, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Nov 11, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 16, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 14, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 12, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Dec 7, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 26, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 25, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 11, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Changes in this version

type Cluster

+ func (c *Cluster) GetListenAddress() string

Oct 6, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Oct 4, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Sep 27, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Aug 18, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Aug 17, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Aug 12, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jul 28, 2016 GO-2022-0390 +10 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2023-1699: Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker

  GO-2023-1700: Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker

  GO-2023-1701: Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Changes in this version

+ var ErrNoSwarm = fmt.Errorf("This node is not part of swarm")

+ var ErrPendingSwarmExists = fmt.Errorf(...)

+ var ErrSwarmExists = fmt.Errorf(...)

+ var ErrSwarmJoinTimeoutReached = fmt.Errorf(...)

+ type Cluster struct

+ func New(config Config) (*Cluster, error)

+ func (c *Cluster) Cleanup()

+ func (c *Cluster) CreateNetwork(s apitypes.NetworkCreateRequest) (string, error)

+ func (c *Cluster) CreateService(s types.ServiceSpec, encodedAuth string) (string, error)

+ func (c *Cluster) GetAdvertiseAddress() string

+ func (c *Cluster) GetLocalAddress() string

+ func (c *Cluster) GetNetwork(input string) (apitypes.NetworkResource, error)

+ func (c *Cluster) GetNetworks() ([]apitypes.NetworkResource, error)

+ func (c *Cluster) GetNode(input string) (types.Node, error)

+ func (c *Cluster) GetNodes(options apitypes.NodeListOptions) ([]types.Node, error)

+ func (c *Cluster) GetRemoteAddress() string

+ func (c *Cluster) GetService(input string) (types.Service, error)

+ func (c *Cluster) GetServices(options apitypes.ServiceListOptions) ([]types.Service, error)

+ func (c *Cluster) GetTask(input string) (types.Task, error)

+ func (c *Cluster) GetTasks(options apitypes.TaskListOptions) ([]types.Task, error)

+ func (c *Cluster) Info() types.Info

+ func (c *Cluster) Init(req types.InitRequest) (string, error)

+ func (c *Cluster) Inspect() (types.Swarm, error)

+ func (c *Cluster) IsAgent() bool

+ func (c *Cluster) IsManager() bool

+ func (c *Cluster) Join(req types.JoinRequest) error

+ func (c *Cluster) Leave(force bool) error

+ func (c *Cluster) ListenClusterEvents() <-chan struct{}

+ func (c *Cluster) RemoveNetwork(input string) error

+ func (c *Cluster) RemoveNode(input string) error

+ func (c *Cluster) RemoveService(input string) error

+ func (c *Cluster) Update(version uint64, spec types.Spec, flags types.UpdateFlags) error

+ func (c *Cluster) UpdateNode(nodeID string, version uint64, spec types.NodeSpec) error

+ func (c *Cluster) UpdateService(serviceID string, version uint64, spec types.ServiceSpec, encodedAuth string) error

+ type Config struct

+ Backend executorpkg.Backend

+ DefaultAdvertiseAddr string

+ Name string

+ NetworkSubnetsProvider NetworkSubnetsProvider

+ Root string

+ type NetworkSubnetsProvider interface

+ V4Subnets func() []net.IPNet

+ V6Subnets func() []net.IPNet

Jul 26, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jul 13, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jul 1, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jun 17, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

Jun 15, 2016 GO-2022-0390 +7 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker