Package
rancher-agent-2.9
Component
github.com/docker/docker
Latest update
9.9
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
Govulncheck found no affected symbols in the scanned Go binary.
Status
Impact
Rancher pins this older version of Docker in the project’s replace block of the go.mod file despite a newer major version being defined in the requires block. This is intentional as there have been minor version changes within the v20.x.x pinned dependency while the more recent version defined in the requires block has jumped major versions throughout time. Upgrading the docker version in the replaces block and the relevant dependencies causes build breaking failures which shows code changes are required. This will require upstream to implement a fix.
Status
Status
Impact
This vulnerability requires upstream changes. The non-vulnerable version >= v24.0.9 does not contain a module 'github.com/docker/docker/pkg/term' that exists in older version such as v20.10.27.
Status