windows

Mar 9, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Mar 8, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Feb 20, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Feb 20, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Feb 11, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Feb 10, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Feb 4, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Changes in this version

+ var DefaultIsolation container.IsolationLevel = "process" — windows/amd64

type Driver — windows/amd64

+ func (d *Driver) Update(c *execdriver.Command) error

Feb 3, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Feb 2, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jan 27, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jan 15, 2016 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Nov 12, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Nov 3, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Changes in this version

+ type Driver struct — windows/amd64

+ func (d *Driver) Clean(id string) error

+ func (d *Driver) Exec(c *execdriver.Command, processConfig *execdriver.ProcessConfig, ...) (int, error)

+ func (d *Driver) GetPidsForContainer(id string) ([]int, error)

+ func (d *Driver) Info(id string) execdriver.Info

+ func (d *Driver) Kill(p *execdriver.Command, sig int) error

+ func (d *Driver) Name() string

+ func (d *Driver) Pause(c *execdriver.Command) error

+ func (d *Driver) Run(c *execdriver.Command, pipes *execdriver.Pipes, hooks execdriver.Hooks) (execdriver.ExitStatus, error)

+ func (d *Driver) Stats(id string) (*execdriver.ResourceStats, error)

+ func (d *Driver) SupportsHooks() bool

+ func (d *Driver) Terminate(p *execdriver.Command) error

+ func (d *Driver) Unpause(c *execdriver.Command) error

Nov 3, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Oct 31, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Oct 28, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Oct 22, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Oct 14, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Sep 3, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Aug 13, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Aug 11, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Changes in this version

+ type StdConsole struct — windows/amd64

+ func NewStdConsole() *StdConsole

+ func (s *StdConsole) Close() error

+ func (s *StdConsole) Resize(h, w int) error

+ type TtyConsole struct — windows/amd64

+ func NewTtyConsole(id string, processid uint32) *TtyConsole

+ func (t *TtyConsole) Close() error

+ func (t *TtyConsole) Resize(h, w int) error

Aug 7, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Aug 4, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jul 25, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jul 9, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jul 8, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jul 2, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jun 18, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Changes in this version

+ const DriverName — windows/amd64

+ const Version — windows/amd64

+ func NewDriver(root, initPath string) (*driver, error) — windows/amd64

+ func NewDriver(root, initPath string) (execdriver.Driver, error) — darwin/amd64, js/wasm, linux/amd64

Jun 16, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jun 16, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jun 12, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Jun 4, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

May 28, 2015 GO-2022-0390 +8 more

  GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

  GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

  GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

  GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

  GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

  GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

  GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

  GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

  GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker