Affected by GO-2022-0416 and 5 other vulnerabilities

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

The highest tagged major version is v5.

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/containers/podman

Links

Open Source Insights

Directories ¶

Path	Synopsis
annotations
api
handlers
handlers/compat
handlers/libpod
handlers/swagger
handlers/types
handlers/utils
server Package api Provides an API for the Libpod library This documentation describes the Podman v2.0 RESTful API.	Package api Provides an API for the Libpod library This documentation describes the Podman v2.0 RESTful API.
server/idle
types
auth
autoupdate
bindings
containers Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
generate Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
images Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
internal/util
manifests Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
network Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
play Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
pods Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
secrets Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
system Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
volumes Code generated by go generate; DO NOT EDIT.	Code generated by go generate; DO NOT EDIT.
channel Package channel provides helper structs/methods/funcs for working with channels Proxy from an io.Writer to a channel: w := channel.NewWriter(make(chan []byte, 10)) go func() { w.Write([]byte("Hello, World")) }() fmt.Println(string(<-w.Chan())) w.Close() Use of the constructor is required to initialize the channel.	Package channel provides helper structs/methods/funcs for working with channels Proxy from an io.Writer to a channel: w := channel.NewWriter(make(chan []byte, 10)) go func() { w.Write([]byte("Hello, World")) }() fmt.Println(string(<-w.Chan())) w.Close() Use of the constructor is required to initialize the channel.
checkpoint
crutils
copy
criu
ctime Package ctime includes a utility for determining file-creation times.	Package ctime includes a utility for determining file-creation times.
domain
entities
entities/reports
entities/types copied from github.com/docker/docker/api/types copied from github.com/docker/docker/api/types	copied from github.com/docker/docker/api/types copied from github.com/docker/docker/api/types
filters
infra
infra/abi
infra/abi/parse
infra/abi/terminal
infra/tunnel
utils
env Package for processing environment variables.	Package for processing environment variables.
errorhandling
hooks Package hooks implements hook configuration and handling for CRI-O and libpod.	Package hooks implements hook configuration and handling for CRI-O and libpod.
0.1.0 Package hook is the 0.1.0 hook configuration structure.	Package hook is the 0.1.0 hook configuration structure.
1.0.0 Package hook is the 1.0.0 hook configuration structure.	Package hook is the 1.0.0 hook configuration structure.
exec Package exec provides utilities for executing Open Container Initiative runtime hooks.	Package exec provides utilities for executing Open Container Initiative runtime hooks.
inspect
kubeutils
lookup
machine
qemu
wsl
namespaces
parallel
ctr
ps
define
resolvconf Package resolvconf provides utility code to query and update DNS configuration in /etc/resolv.conf.	Package resolvconf provides utility code to query and update DNS configuration in /etc/resolv.conf.
dns
rootless
rootlessport Package rootlessport provides reexec for RootlessKit-based port forwarder.	Package rootlessport provides reexec for RootlessKit-based port forwarder.
seccomp
selinux
servicereaper
signal Signal handling for Linux only.	Signal handling for Linux only.
specgen
generate
generate/kube
specgenutil
systemd
define
generate
terminal
timetype
trust
util
camelcase Package camelcase is a micro package to split the words of a camelcase type string into a slice of words.	Package camelcase is a micro package to split the words of a camelcase type string into a slice of words.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL