Affected by GO-2022-0344 and 7 other vulnerabilities

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

The highest tagged major version is v2.

schema1

package

v1.0.0-alpha0 Latest Latest Go to latest Published: Jul 13, 2017 License: Apache-2.0, CC-BY-SA-4.0 Imports: 21 Imported by: 297

Details

This section is empty.

This section is empty.

This section is empty.

type Converter struct {
	// contains filtered or unexported fields
}

Converter converts schema1 manifests to schema2 on fetch

func NewConverter(contentStore content.Store, fetcher remotes.Fetcher) *Converter

func (c *Converter) Convert(ctx context.Context) (ocispec.Descriptor, error)

func (c *Converter) Handle(ctx context.Context, desc ocispec.Descriptor) ([]ocispec.Descriptor, error)