GO-2024-2512
Classic builder cache poisoning in github.com/docker/docker
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2024-24557
- Alias
- GHSA-xw73-rw38-6vjc
Description
Classic builder cache poisoning in github.com/docker/docker
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/docker/docker | introduced 0, fixed 24.0.9+incompatible, introduced 25.0.0+incompatible, fixed 25.0.2+incompatible |
| Go · github.com/moby/moby | introduced 0, fixed 24.0.9+incompatible, introduced 25.0.0+incompatible, fixed 25.0.2+incompatible |
Références
- https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc ADVISORY
- https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae FIX
- https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd FIX
- https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |