Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

winconsole

package

Go to main page

Versions in this module

v1

v1.8.2-rc1

Sep 3, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.8.1

Aug 13, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.8.0

Aug 11, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.8.0-rc3

Aug 7, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.8.0-rc2

Aug 4, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.8.0-rc1

Jul 25, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.1-rc3

Jul 9, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.1-rc2

Jul 8, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.1-rc1

Jul 2, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.0

Jun 18, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.0-rc5

Jun 16, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.0-rc4

Jun 16, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.0-rc3

Jun 12, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.0-rc2

Jun 4, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.7.0-rc1

May 28, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.6.1

May 7, 2015 GO-2022-0390 +13 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.6.0

Apr 16, 2015 GO-2022-0390 +17 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0638: Information Exposure in Docker Engine in github.com/docker/docker

GO-2022-0647: Arbitrary File Write in Libcontainer in github.com/docker/docker

GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

Changes in this version

+ const ANSI_ATTR_BLINK — windows/amd64

+ const ANSI_ATTR_BLINK_OFF — windows/amd64

+ const ANSI_ATTR_BOLD — windows/amd64

+ const ANSI_ATTR_DIM — windows/amd64

+ const ANSI_ATTR_INVISIBLE — windows/amd64

+ const ANSI_ATTR_INVISIBLE_OFF — windows/amd64

+ const ANSI_ATTR_RESET — windows/amd64

+ const ANSI_ATTR_REVERSE — windows/amd64

+ const ANSI_ATTR_REVERSE_OFF — windows/amd64

+ const ANSI_ATTR_UNDERLINE — windows/amd64

+ const ANSI_ATTR_UNDERLINE_OFF — windows/amd64

+ const ANSI_BACKGROUND_BLACK — windows/amd64

+ const ANSI_BACKGROUND_BLUE — windows/amd64

+ const ANSI_BACKGROUND_CYAN — windows/amd64

+ const ANSI_BACKGROUND_DEFAULT — windows/amd64

+ const ANSI_BACKGROUND_GREEN — windows/amd64

+ const ANSI_BACKGROUND_MAGENTA — windows/amd64

+ const ANSI_BACKGROUND_RED — windows/amd64

+ const ANSI_BACKGROUND_WHITE — windows/amd64

+ const ANSI_BACKGROUND_YELLOW — windows/amd64

+ const ANSI_BEL

+ const ANSI_CMD_DECPAM

+ const ANSI_CMD_DECPNM

+ const ANSI_CMD_G0

+ const ANSI_CMD_G1

+ const ANSI_CMD_G2

+ const ANSI_CMD_G3

+ const ANSI_CMD_OSC

+ const ANSI_CMD_STR_TERM

+ const ANSI_COMMAND_FIRST

+ const ANSI_COMMAND_LAST

+ const ANSI_ESCAPE_PRIMARY

+ const ANSI_ESCAPE_SECONDARY

+ const ANSI_FOREGROUND_BLACK — windows/amd64

+ const ANSI_FOREGROUND_BLUE — windows/amd64

+ const ANSI_FOREGROUND_CYAN — windows/amd64

+ const ANSI_FOREGROUND_DEFAULT — windows/amd64

+ const ANSI_FOREGROUND_GREEN — windows/amd64

+ const ANSI_FOREGROUND_MAGENTA — windows/amd64

+ const ANSI_FOREGROUND_RED — windows/amd64

+ const ANSI_FOREGROUND_WHITE — windows/amd64

+ const ANSI_FOREGROUND_YELLOW — windows/amd64

+ const ANSI_MAX_CMD_LENGTH — windows/amd64

+ const ANSI_PARAMETER_SEP

+ const BACKGROUND_BLUE — windows/amd64

+ const BACKGROUND_GREEN — windows/amd64

+ const BACKGROUND_INTENSITY — windows/amd64

+ const BACKGROUND_MASK_SET — windows/amd64

+ const BACKGROUND_MASK_UNSET — windows/amd64

+ const BACKGROUND_RED — windows/amd64

+ const CAPSLOCK_ON — windows/amd64

+ const COMMON_LVB_REVERSE_VIDEO — windows/amd64

+ const COMMON_LVB_UNDERSCORE — windows/amd64

+ const DEFAULT_HEIGHT — windows/amd64

+ const DEFAULT_WIDTH — windows/amd64

+ const ENABLE_ECHO_INPUT — windows/amd64

+ const ENABLE_EXTENDED_FLAGS — windows/amd64

+ const ENABLE_INSERT_MODE — windows/amd64

+ const ENABLE_LINE_INPUT — windows/amd64

+ const ENABLE_MOUSE_INPUT — windows/amd64

+ const ENABLE_PROCESSED_INPUT — windows/amd64

+ const ENABLE_PROCESSED_OUTPUT — windows/amd64

+ const ENABLE_QUICK_EDIT_MODE — windows/amd64

+ const ENABLE_WINDOW_INPUT — windows/amd64

+ const ENABLE_WRAP_AT_EOL_OUTPUT — windows/amd64

+ const ENHANCED_KEY — windows/amd64

+ const FOREGROUND_BLUE — windows/amd64

+ const FOREGROUND_GREEN — windows/amd64

+ const FOREGROUND_INTENSITY — windows/amd64

+ const FOREGROUND_MASK_SET — windows/amd64

+ const FOREGROUND_MASK_UNSET — windows/amd64

+ const FOREGROUND_RED — windows/amd64

+ const KEY_CONTROL_PARAM_2 — windows/amd64

+ const KEY_CONTROL_PARAM_3 — windows/amd64

+ const KEY_CONTROL_PARAM_4 — windows/amd64

+ const KEY_CONTROL_PARAM_5 — windows/amd64

+ const KEY_CONTROL_PARAM_6 — windows/amd64

+ const KEY_CONTROL_PARAM_7 — windows/amd64

+ const KEY_CONTROL_PARAM_8 — windows/amd64

+ const KEY_ESC_CSI — windows/amd64

+ const KEY_ESC_N — windows/amd64

+ const KEY_ESC_O — windows/amd64

+ const KEY_EVENT

+ const LEFT_ALT_PRESSED — windows/amd64

+ const LEFT_CTRL_PRESSED — windows/amd64

+ const MAX_INPUT_BUFFER — windows/amd64

+ const MAX_INPUT_EVENTS — windows/amd64

+ const NUMLOCK_ON — windows/amd64

+ const RIGHT_ALT_PRESSED — windows/amd64

+ const RIGHT_CTRL_PRESSED — windows/amd64

+ const SCROLLLOCK_ON — windows/amd64

+ const SHIFT_PRESSED — windows/amd64

+ const VK_DELETE — windows/amd64

+ const VK_DOWN — windows/amd64

+ const VK_END — windows/amd64

+ const VK_EXECUTE — windows/amd64

+ const VK_F1 — windows/amd64

+ const VK_F10 — windows/amd64

+ const VK_F11 — windows/amd64

+ const VK_F12 — windows/amd64

+ const VK_F2 — windows/amd64

+ const VK_F3 — windows/amd64

+ const VK_F4 — windows/amd64

+ const VK_F5 — windows/amd64

+ const VK_F6 — windows/amd64

+ const VK_F7 — windows/amd64

+ const VK_F8 — windows/amd64

+ const VK_F9 — windows/amd64

+ const VK_HELP — windows/amd64

+ const VK_HOME — windows/amd64

+ const VK_INSERT — windows/amd64

+ const VK_LEFT — windows/amd64

+ const VK_NEXT — windows/amd64

+ const VK_PRINT — windows/amd64

+ const VK_PRIOR — windows/amd64

+ const VK_RIGHT — windows/amd64

+ const VK_SELECT — windows/amd64

+ const VK_SNAPSHOT — windows/amd64

+ const VK_UP — windows/amd64

+ func GetConsoleMode(handle uintptr) (uint32, error) — windows/amd64

+ func GetHandleInfo(in interface{}) (uintptr, bool) — windows/amd64

+ func IsConsole(fd uintptr) bool — windows/amd64

+ func SetConsoleMode(handle uintptr, mode uint32) error — windows/amd64

+ func SetCursorVisible(handle uintptr, isVisible BOOL) (bool, error) — windows/amd64

+ func SetWindowSize(handle uintptr, width, height, max SHORT) (bool, error) — windows/amd64

+ func WinConsoleStreams() (stdIn io.ReadCloser, stdOut, stdErr io.Writer) — windows/amd64

+ type BOOL int32 — windows/amd64

+ type CHAR_INFO struct — windows/amd64

+ Attributes WORD

+ UnicodeChar WCHAR

+ type CONSOLE_CURSOR_INFO struct — windows/amd64

+ Size DWORD

+ Visible BOOL

+ type CONSOLE_SCREEN_BUFFER_INFO struct — windows/amd64

+ Attributes WORD

+ CursorPosition COORD

+ MaximumWindowSize COORD

+ Size COORD

+ Window SMALL_RECT

+ func GetConsoleScreenBufferInfo(handle uintptr) (*CONSOLE_SCREEN_BUFFER_INFO, error)

+ type COORD struct — windows/amd64

+ X SHORT

+ Y SHORT

+ type DWORD uint32 — windows/amd64

+ type INPUT_RECORD struct — windows/amd64

+ EventType WORD

+ KeyEvent KEY_EVENT_RECORD

+ type KEY_EVENT_RECORD struct — windows/amd64

+ ControlKeyState DWORD

+ KeyDown BOOL

+ RepeatCount WORD

+ UnicodeChar WCHAR

+ VirtualKeyCode WORD

+ VirtualScanCode WORD

+ type SHORT int16 — windows/amd64

+ type SMALL_RECT struct — windows/amd64

+ Bottom SHORT

+ Left SHORT

+ Right SHORT

+ Top SHORT

+ type WCHAR uint16 — windows/amd64

+ type WORD uint16 — windows/amd64

+ type WindowsTerminal struct — windows/amd64

+ func (term *WindowsTerminal) HandleInputSequence(fd uintptr, command []byte) (n int, err error)

+ func (term *WindowsTerminal) HandleOutputCommand(handle uintptr, command []byte) (n int, err error)

+ func (term *WindowsTerminal) ReadChars(fd uintptr, r io.Reader, p []byte) (n int, err error)

+ func (term *WindowsTerminal) WriteChars(fd uintptr, w io.Writer, p []byte) (n int, err error)

v1.6.0-rc7

Apr 15, 2015 GO-2022-0390 +15 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.6.0-rc6

Apr 13, 2015 GO-2022-0390 +15 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.6.0-rc5

Apr 6, 2015 GO-2022-0390 +15 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.6.0-rc4

Apr 2, 2015 GO-2022-0390 +15 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.6.0-rc3

Mar 31, 2015 GO-2022-0390 +15 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.6.0-rc2

Mar 25, 2015 GO-2022-0390 +15 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker

v1.6.0-rc1

Mar 23, 2015 GO-2022-0390 +15 more

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2022-0649: Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

GO-2022-0708: Arbitrary File Override in Docker Engine in github.com/docker/docker

GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker

GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker

GO-2024-2500: Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker

GO-2024-2512: Classic builder cache poisoning in github.com/docker/docker

GO-2024-2521: Moby Docker cp broken with debian containers in github.com/docker/docker

GO-2024-2913: Unexpected chmod of host files via 'docker cp' in Moby Docker Engine in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2025-3829: Moby firewalld reload removes bridge network isolation in github.com/docker/docker

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Race condition in 'docker cp' in github.com/docker/docker allows bind mount redirection

GO-2026-5668: Race condition in 'docker cp' in github.com/docker/docker allows creation of arbitrary files

GO-2026-5746: Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker