Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

shim

package

Go to main page

Versions in this module

v1

v1.1.8

Sep 26, 2019 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.7

Apr 5, 2019 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.6

Feb 14, 2019 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.5

Nov 21, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.4

Sep 25, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.3

Aug 22, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.2

Jul 13, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.1

Jul 9, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.1-rc.2

Jun 27, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.1-rc.1

Jun 18, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.1-rc.0

May 31, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.0

Apr 24, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.0-rc.2

Apr 13, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.0-rc.1

Apr 5, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.1.0-rc.0

Mar 27, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.3

Apr 2, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.3-rc.0

Mar 29, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.2

Feb 13, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.2-rc.1

Feb 6, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.2-rc.0

Jan 30, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.1

Jan 17, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.1-rc.0

Jan 11, 2018 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0

Dec 5, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Changes in this version

+ var ErrIntOverflowShim = fmt.Errorf("proto: integer overflow")

+ var ErrInvalidLengthShim = fmt.Errorf("proto: negative length found during unmarshaling")

+ func RegisterShimService(srv *github_com_stevvooe_ttrpc.Server, svc ShimService)

+ type CheckpointTaskRequest struct

+ Options *google_protobuf.Any

+ Path string

+ func (*CheckpointTaskRequest) Descriptor() ([]byte, []int)

+ func (*CheckpointTaskRequest) ProtoMessage()

+ func (m *CheckpointTaskRequest) Marshal() (dAtA []byte, err error)

+ func (m *CheckpointTaskRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *CheckpointTaskRequest) Reset()

+ func (m *CheckpointTaskRequest) Size() (n int)

+ func (m *CheckpointTaskRequest) Unmarshal(dAtA []byte) error

+ func (this *CheckpointTaskRequest) String() string

+ type CloseIORequest struct

+ ID string

+ Stdin bool

+ func (*CloseIORequest) Descriptor() ([]byte, []int)

+ func (*CloseIORequest) ProtoMessage()

+ func (m *CloseIORequest) Marshal() (dAtA []byte, err error)

+ func (m *CloseIORequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *CloseIORequest) Reset()

+ func (m *CloseIORequest) Size() (n int)

+ func (m *CloseIORequest) Unmarshal(dAtA []byte) error

+ func (this *CloseIORequest) String() string

+ type CreateTaskRequest struct

+ Bundle string

+ Checkpoint string

+ ID string

+ Options *google_protobuf.Any

+ ParentCheckpoint string

+ Rootfs []*containerd_types.Mount

+ Runtime string

+ Stderr string

+ Stdin string

+ Stdout string

+ Terminal bool

+ func (*CreateTaskRequest) Descriptor() ([]byte, []int)

+ func (*CreateTaskRequest) ProtoMessage()

+ func (m *CreateTaskRequest) Marshal() (dAtA []byte, err error)

+ func (m *CreateTaskRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *CreateTaskRequest) Reset()

+ func (m *CreateTaskRequest) Size() (n int)

+ func (m *CreateTaskRequest) Unmarshal(dAtA []byte) error

+ func (this *CreateTaskRequest) String() string

+ type CreateTaskResponse struct

+ Pid uint32

+ func (*CreateTaskResponse) Descriptor() ([]byte, []int)

+ func (*CreateTaskResponse) ProtoMessage()

+ func (m *CreateTaskResponse) Marshal() (dAtA []byte, err error)

+ func (m *CreateTaskResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *CreateTaskResponse) Reset()

+ func (m *CreateTaskResponse) Size() (n int)

+ func (m *CreateTaskResponse) Unmarshal(dAtA []byte) error

+ func (this *CreateTaskResponse) String() string

+ type DeleteProcessRequest struct

+ ID string

+ func (*DeleteProcessRequest) Descriptor() ([]byte, []int)

+ func (*DeleteProcessRequest) ProtoMessage()

+ func (m *DeleteProcessRequest) Marshal() (dAtA []byte, err error)

+ func (m *DeleteProcessRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *DeleteProcessRequest) Reset()

+ func (m *DeleteProcessRequest) Size() (n int)

+ func (m *DeleteProcessRequest) Unmarshal(dAtA []byte) error

+ func (this *DeleteProcessRequest) String() string

+ type DeleteResponse struct

+ ExitStatus uint32

+ ExitedAt time.Time

+ Pid uint32

+ func (*DeleteResponse) Descriptor() ([]byte, []int)

+ func (*DeleteResponse) ProtoMessage()

+ func (m *DeleteResponse) Marshal() (dAtA []byte, err error)

+ func (m *DeleteResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *DeleteResponse) Reset()

+ func (m *DeleteResponse) Size() (n int)

+ func (m *DeleteResponse) Unmarshal(dAtA []byte) error

+ func (this *DeleteResponse) String() string

+ type ExecProcessRequest struct

+ ID string

+ Spec *google_protobuf.Any

+ Stderr string

+ Stdin string

+ Stdout string

+ Terminal bool

+ func (*ExecProcessRequest) Descriptor() ([]byte, []int)

+ func (*ExecProcessRequest) ProtoMessage()

+ func (m *ExecProcessRequest) Marshal() (dAtA []byte, err error)

+ func (m *ExecProcessRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *ExecProcessRequest) Reset()

+ func (m *ExecProcessRequest) Size() (n int)

+ func (m *ExecProcessRequest) Unmarshal(dAtA []byte) error

+ func (this *ExecProcessRequest) String() string

+ type ExecProcessResponse struct

+ func (*ExecProcessResponse) Descriptor() ([]byte, []int)

+ func (*ExecProcessResponse) ProtoMessage()

+ func (m *ExecProcessResponse) Marshal() (dAtA []byte, err error)

+ func (m *ExecProcessResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *ExecProcessResponse) Reset()

+ func (m *ExecProcessResponse) Size() (n int)

+ func (m *ExecProcessResponse) Unmarshal(dAtA []byte) error

+ func (this *ExecProcessResponse) String() string

+ type KillRequest struct

+ All bool

+ ID string

+ Signal uint32

+ func (*KillRequest) Descriptor() ([]byte, []int)

+ func (*KillRequest) ProtoMessage()

+ func (m *KillRequest) Marshal() (dAtA []byte, err error)

+ func (m *KillRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *KillRequest) Reset()

+ func (m *KillRequest) Size() (n int)

+ func (m *KillRequest) Unmarshal(dAtA []byte) error

+ func (this *KillRequest) String() string

+ type ListPidsRequest struct

+ ID string

+ func (*ListPidsRequest) Descriptor() ([]byte, []int)

+ func (*ListPidsRequest) ProtoMessage()

+ func (m *ListPidsRequest) Marshal() (dAtA []byte, err error)

+ func (m *ListPidsRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *ListPidsRequest) Reset()

+ func (m *ListPidsRequest) Size() (n int)

+ func (m *ListPidsRequest) Unmarshal(dAtA []byte) error

+ func (this *ListPidsRequest) String() string

+ type ListPidsResponse struct

+ Processes []*containerd_v1_types.ProcessInfo

+ func (*ListPidsResponse) Descriptor() ([]byte, []int)

+ func (*ListPidsResponse) ProtoMessage()

+ func (m *ListPidsResponse) Marshal() (dAtA []byte, err error)

+ func (m *ListPidsResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *ListPidsResponse) Reset()

+ func (m *ListPidsResponse) Size() (n int)

+ func (m *ListPidsResponse) Unmarshal(dAtA []byte) error

+ func (this *ListPidsResponse) String() string

+ type ResizePtyRequest struct

+ Height uint32

+ ID string

+ Width uint32

+ func (*ResizePtyRequest) Descriptor() ([]byte, []int)

+ func (*ResizePtyRequest) ProtoMessage()

+ func (m *ResizePtyRequest) Marshal() (dAtA []byte, err error)

+ func (m *ResizePtyRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *ResizePtyRequest) Reset()

+ func (m *ResizePtyRequest) Size() (n int)

+ func (m *ResizePtyRequest) Unmarshal(dAtA []byte) error

+ func (this *ResizePtyRequest) String() string

+ type ShimInfoResponse struct

+ ShimPid uint32

+ func (*ShimInfoResponse) Descriptor() ([]byte, []int)

+ func (*ShimInfoResponse) ProtoMessage()

+ func (m *ShimInfoResponse) Marshal() (dAtA []byte, err error)

+ func (m *ShimInfoResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *ShimInfoResponse) Reset()

+ func (m *ShimInfoResponse) Size() (n int)

+ func (m *ShimInfoResponse) Unmarshal(dAtA []byte) error

+ func (this *ShimInfoResponse) String() string

+ type ShimService interface

+ Checkpoint func(ctx context.Context, req *CheckpointTaskRequest) (*google_protobuf1.Empty, error)

+ CloseIO func(ctx context.Context, req *CloseIORequest) (*google_protobuf1.Empty, error)

+ Create func(ctx context.Context, req *CreateTaskRequest) (*CreateTaskResponse, error)

+ Delete func(ctx context.Context, req *google_protobuf1.Empty) (*DeleteResponse, error)

+ DeleteProcess func(ctx context.Context, req *DeleteProcessRequest) (*DeleteResponse, error)

+ Exec func(ctx context.Context, req *ExecProcessRequest) (*google_protobuf1.Empty, error)

+ Kill func(ctx context.Context, req *KillRequest) (*google_protobuf1.Empty, error)

+ ListPids func(ctx context.Context, req *ListPidsRequest) (*ListPidsResponse, error)

+ Pause func(ctx context.Context, req *google_protobuf1.Empty) (*google_protobuf1.Empty, error)

+ ResizePty func(ctx context.Context, req *ResizePtyRequest) (*google_protobuf1.Empty, error)

+ Resume func(ctx context.Context, req *google_protobuf1.Empty) (*google_protobuf1.Empty, error)

+ ShimInfo func(ctx context.Context, req *google_protobuf1.Empty) (*ShimInfoResponse, error)

+ Start func(ctx context.Context, req *StartRequest) (*StartResponse, error)

+ State func(ctx context.Context, req *StateRequest) (*StateResponse, error)

+ Update func(ctx context.Context, req *UpdateTaskRequest) (*google_protobuf1.Empty, error)

+ Wait func(ctx context.Context, req *WaitRequest) (*WaitResponse, error)

+ func NewShimClient(client *github_com_stevvooe_ttrpc.Client) ShimService

+ type StartRequest struct

+ ID string

+ func (*StartRequest) Descriptor() ([]byte, []int)

+ func (*StartRequest) ProtoMessage()

+ func (m *StartRequest) Marshal() (dAtA []byte, err error)

+ func (m *StartRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *StartRequest) Reset()

+ func (m *StartRequest) Size() (n int)

+ func (m *StartRequest) Unmarshal(dAtA []byte) error

+ func (this *StartRequest) String() string

+ type StartResponse struct

+ ID string

+ Pid uint32

+ func (*StartResponse) Descriptor() ([]byte, []int)

+ func (*StartResponse) ProtoMessage()

+ func (m *StartResponse) Marshal() (dAtA []byte, err error)

+ func (m *StartResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *StartResponse) Reset()

+ func (m *StartResponse) Size() (n int)

+ func (m *StartResponse) Unmarshal(dAtA []byte) error

+ func (this *StartResponse) String() string

+ type StateRequest struct

+ ID string

+ func (*StateRequest) Descriptor() ([]byte, []int)

+ func (*StateRequest) ProtoMessage()

+ func (m *StateRequest) Marshal() (dAtA []byte, err error)

+ func (m *StateRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *StateRequest) Reset()

+ func (m *StateRequest) Size() (n int)

+ func (m *StateRequest) Unmarshal(dAtA []byte) error

+ func (this *StateRequest) String() string

+ type StateResponse struct

+ Bundle string

+ ExitStatus uint32

+ ExitedAt time.Time

+ ID string

+ Pid uint32

+ Status containerd_v1_types.Status

+ Stderr string

+ Stdin string

+ Stdout string

+ Terminal bool

+ func (*StateResponse) Descriptor() ([]byte, []int)

+ func (*StateResponse) ProtoMessage()

+ func (m *StateResponse) Marshal() (dAtA []byte, err error)

+ func (m *StateResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *StateResponse) Reset()

+ func (m *StateResponse) Size() (n int)

+ func (m *StateResponse) Unmarshal(dAtA []byte) error

+ func (this *StateResponse) String() string

+ type UpdateTaskRequest struct

+ Resources *google_protobuf.Any

+ func (*UpdateTaskRequest) Descriptor() ([]byte, []int)

+ func (*UpdateTaskRequest) ProtoMessage()

+ func (m *UpdateTaskRequest) Marshal() (dAtA []byte, err error)

+ func (m *UpdateTaskRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *UpdateTaskRequest) Reset()

+ func (m *UpdateTaskRequest) Size() (n int)

+ func (m *UpdateTaskRequest) Unmarshal(dAtA []byte) error

+ func (this *UpdateTaskRequest) String() string

+ type WaitRequest struct

+ ID string

+ func (*WaitRequest) Descriptor() ([]byte, []int)

+ func (*WaitRequest) ProtoMessage()

+ func (m *WaitRequest) Marshal() (dAtA []byte, err error)

+ func (m *WaitRequest) MarshalTo(dAtA []byte) (int, error)

+ func (m *WaitRequest) Reset()

+ func (m *WaitRequest) Size() (n int)

+ func (m *WaitRequest) Unmarshal(dAtA []byte) error

+ func (this *WaitRequest) String() string

+ type WaitResponse struct

+ ExitStatus uint32

+ ExitedAt time.Time

+ func (*WaitResponse) Descriptor() ([]byte, []int)

+ func (*WaitResponse) ProtoMessage()

+ func (m *WaitResponse) Marshal() (dAtA []byte, err error)

+ func (m *WaitResponse) MarshalTo(dAtA []byte) (int, error)

+ func (m *WaitResponse) Reset()

+ func (m *WaitResponse) Size() (n int)

+ func (m *WaitResponse) Unmarshal(dAtA []byte) error

+ func (this *WaitResponse) String() string

v1.0.0-rc.0

Dec 1, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-beta.3

Nov 8, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-beta.2

Oct 12, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-beta.1

Sep 22, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-beta.0

Sep 6, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-alpha6

Aug 23, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-alpha5

Aug 17, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-alpha4

Aug 10, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-alpha3

Aug 2, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-alpha2

Jul 26, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-alpha1

Jul 19, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

v1.0.0-alpha0

Jul 13, 2017 GO-2022-0344 +11 more

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd