GHSA-6hwg-w5jg-9c6x, CVE-2020-27534
go/github.com/moby/moby
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
All versions before 19.03.9
Upgrade to version 19.03.9 or above.
2024-02-01
source |