trust

Jun 18, 2019 GO-2022-0281 +5 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Nov 11, 2019 GO-2022-0281 +5 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Aug 27, 2019 GO-2022-0281 +5 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Aug 5, 2019 GO-2022-0281 +5 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Jun 14, 2019 GO-2022-0281 +5 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Jun 7, 2019 GO-2022-0281 +5 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

May 28, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

May 16, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

May 6, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Mar 30, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Mar 5, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Mar 1, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Feb 26, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Changes in this version

+ func GetGPGIdFromKeyData(key string) []string

+ func GetGPGIdFromKeyPath(path string) []string

Aug 14, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Aug 5, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Jul 18, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Jun 25, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Feb 11, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Jan 11, 2019 GO-2022-0281 +6 more

  GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

  GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

  GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

  GO-2023-1927: Podman Path Traversal Vulnerability leads to arbitrary file read/write in github.com/containers/podman

  GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

  GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

  GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

Changes in this version

+ func CreateTmpFile(dir, pattern string, content []byte) (string, error)

+ func DefaultPolicyPath(sys *types.SystemContext) string

+ func GetPolicy(policyContentStruct PolicyContent, systemRegistriesDirPath string) (map[string]map[string]interface{}, map[string]ShowOutput, error)

+ func RegistriesDirPath(sys *types.SystemContext) string

+ type PolicyContent struct

+ Default []RepoContent

+ Transports TransportsContent

+ type RegistryConfiguration struct

+ DefaultDocker *RegistryNamespace

+ Docker map[string]RegistryNamespace

+ func LoadAndMergeConfig(dirPath string) (*RegistryConfiguration, error)

+ type RegistryNamespace struct

+ SigStore string

+ SigStoreStaging string

+ func HaveMatchRegistry(key string, registryConfigs *RegistryConfiguration) *RegistryNamespace

+ type RepoContent struct

+ KeyData string

+ KeyPath string

+ KeyType string

+ SignedIdentity json.RawMessage

+ Type string

+ type RepoMap map[string][]RepoContent

+ type ShowOutput struct

+ GPGid string

+ Repo string

+ Sigstore string

+ Trusttype string

+ type TransportsContent map[string]RepoMap