CVE-2020-27534
go/github.com/docker/libcontainer
Path Traversal
util/binfmt_misc/check.go in Builder of Docker Engine calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
All versions before 19.03.9
Upgrade to version 19.03.9 or above.
2021-01-07
| source |