MEDIUM5.3
GHSA-6hwg-w5jg-9c6x
Path Traversal in Moby builder
Quick fix
GHSA-6hwg-w5jg-9c6x — github.com/moby/moby: upgrade to the fixed version with the command below.
go get github.com/moby/moby@v19.03.9Details
util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/docker/docker
Introduced in:
0Fixed in: 19.03.9Fix
go get github.com/docker/docker@v19.03.9