storage

Sep 9, 2024

Changes in this version

type ImageResult

+ MountPoint string

type ImageServer

+ IsRunningImageAllowed func(ctx context.Context, systemContext *types.SystemContext, ...) error

May 3, 2024 GO-2024-2919

  GO-2024-2919: malicious container creates symlink "mtab" on the host External in github.com/cri-o/cri-o

Apr 30, 2024 GO-2024-2919

  GO-2024-2919: malicious container creates symlink "mtab" on the host External in github.com/cri-o/cri-o

Changes in this version

type ImageServer

+ UpdatePinnedImagesList func(imageList []string)

Apr 19, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 22, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 11, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 21, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

type ImageResult

+ SomeNameOfThisImage *RegistryImageReference

type ImageServer

+ CandidatesForPotentiallyShortImageName func(systemContext *types.SystemContext, imageName string) ([]RegistryImageReference, error)

+ DeleteImage func(systemContext *types.SystemContext, id StorageImageID) error

+ HeuristicallyTryResolvingStringAsIDPrefix func(heuristicInput string) *StorageImageID

+ ImageStatusByID func(systemContext *types.SystemContext, id StorageImageID) (*ImageResult, error)

+ ImageStatusByName func(systemContext *types.SystemContext, name RegistryImageReference) (*ImageResult, error)

+ type RegistryImageReference = references.RegistryImageReference

+ type StorageImageID struct

+ func ParseStorageImageIDFromOutOfProcessData(input string) (StorageImageID, error)

+ func (id StorageImageID) Format(f fmt.State, verb rune)

+ func (id StorageImageID) IDStringForOutOfProcessConsumptionOnly() string

+ type StorageTransport interface

+ ResolveReference func(ref types.ImageReference) (types.ImageReference, *storage.Image, error)

Apr 29, 2024 GO-2024-2919

  GO-2024-2919: malicious container creates symlink "mtab" on the host External in github.com/cri-o/cri-o

Apr 19, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 22, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 11, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Nov 1, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 12, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Aug 23, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

+ func CompileRegexpsForPinnedImages(patterns []string) []*regexp.Regexp

+ func FilterPinnedImage(image string, pinnedImages []*regexp.Regexp) bool

type ImageResult

+ Pinned bool

Apr 19, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 22, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 11, 2024 GO-2024-2791

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Nov 16, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 12, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Apr 19, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 13, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 29, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 8, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 10, 2023 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 23, 2022 GO-2024-2458 +1 more

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

type ImageResult

+ Annotations map[string]string

Nov 22, 2023 GO-2022-1206 +2 more

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 31, 2023 GO-2022-1206 +2 more

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Apr 4, 2023 GO-2022-1206 +2 more

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 10, 2023 GO-2022-1206 +2 more

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Oct 7, 2022 GO-2022-1206 +2 more

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Aug 29, 2022 GO-2022-1206 +2 more

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 13, 2023 GO-2022-1014 +3 more

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Apr 4, 2023 GO-2022-1014 +3 more

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 10, 2023 GO-2022-1014 +3 more

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Oct 7, 2022 GO-2022-1014 +3 more

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 25, 2022 GO-2022-1014 +3 more

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 6, 2022 GO-2022-1014 +3 more

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

May 10, 2022 GO-2022-0480 +4 more

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 10, 2023 GO-2022-0426 +4 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Oct 21, 2022 GO-2022-0426 +4 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 6, 2022 GO-2022-0426 +4 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +5 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 11, 2022 GO-2022-0354 +6 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 17, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 6, 2022 GO-2022-0426 +5 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

May 17, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 24, 2022 GO-2022-0354 +7 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Nov 8, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Aug 25, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

May 17, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 5, 2022 GO-2022-0354 +7 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Nov 9, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 9, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 19, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 3, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

+ var ImageBeingPulled sync.Map

Apr 13, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 18, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Nov 8, 2021 GO-2022-0354 +7 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 9, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 19, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 2, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 17, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 24, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 11, 2020 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

+ type CgroupPullConfiguration struct

+ ParentCgroup string

+ UseNewCgroup bool

+ type ImageCopyOptions struct

+ CgroupPull CgroupPullConfiguration

+ DestinationCtx *types.SystemContext

+ OciDecryptConfig *encconfig.DecryptConfig

+ Progress chan types.ProgressProperties

+ ProgressInterval time.Duration

+ SourceCtx *types.SystemContext

Dec 9, 2020 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 8, 2022 GO-2022-0354 +7 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 9, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 19, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 2, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 24, 2020 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 14, 2020 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

type RuntimeContainerMetadata

+ Privileged bool

Aug 21, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 11, 2022 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 6, 2022 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Oct 23, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 16, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 18, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

May 14, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Apr 23, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

+ var ErrCannotParseImageID = errors.New("cannot parse an image ID")

+ var ErrImageMultiplyTagged = errors.New("image still has multiple names applied")

+ var ErrInvalidContainerID = errors.New("invalid container ID")

+ var ErrInvalidContainerName = errors.New("invalid container name")

+ var ErrInvalidImageName = errors.New("invalid image name")

+ var ErrInvalidPodName = errors.New("invalid pod name")

+ var ErrInvalidSandboxID = errors.New("invalid sandbox ID")

+ var ErrNoRegistriesConfigured = errors.New(...)

+ func IsCrioContainer(md *RuntimeContainerMetadata) bool

+ type ContainerInfo struct

+ Config *v1.Image

+ Dir string

+ ID string

+ MountLabel string

+ ProcessLabel string

+ RunDir string

+ type ImageResult struct

+ ConfigDigest digest.Digest

+ Digest digest.Digest

+ ID string

+ Labels map[string]string

+ Name string

+ OCIConfig *specs.Image

+ PreviousName string

+ RepoDigests []string

+ RepoTags []string

+ Size *uint64

+ User string

+ type ImageServer interface

+ GetStore func() storage.Store

+ ImageStatus func(systemContext *types.SystemContext, filter string) (*ImageResult, error)

+ ListImages func(systemContext *types.SystemContext, filter string) ([]ImageResult, error)

+ PrepareImage func(systemContext *types.SystemContext, imageName string) (types.ImageCloser, error)

+ PullImage func(systemContext *types.SystemContext, imageName string, options *copy.Options) (types.ImageReference, error)

+ ResolveNames func(systemContext *types.SystemContext, imageName string) ([]string, error)

+ UntagImage func(systemContext *types.SystemContext, imageName string) error

+ func GetImageService(ctx context.Context, sc *types.SystemContext, store storage.Store, ...) (ImageServer, error)

+ type RuntimeContainerMetadata struct

+ Attempt uint32

+ ContainerName string

+ CreatedAt int64

+ ImageID string

+ ImageName string

+ MetadataName string

+ MountLabel string

+ Namespace string

+ Pod bool

+ PodID string

+ PodName string

+ UID string

+ func (metadata *RuntimeContainerMetadata) SetMountLabel(mountLabel string)

+ type RuntimeServer interface

+ CreateContainer func(systemContext *types.SystemContext, ...) (ContainerInfo, error)

+ CreatePodSandbox func(systemContext *types.SystemContext, ...) (ContainerInfo, error)

+ DeleteContainer func(idOrName string) error

+ GetContainerMetadata func(idOrName string) (RuntimeContainerMetadata, error)

+ GetRunDir func(id string) (string, error)

+ GetWorkDir func(id string) (string, error)

+ RemovePodSandbox func(idOrName string) error

+ SetContainerMetadata func(idOrName string, metadata *RuntimeContainerMetadata) error

+ StartContainer func(idOrName string) (string, error)

+ StopContainer func(idOrName string) error

+ func GetRuntimeService(ctx context.Context, storageImageServer ImageServer) RuntimeServer

Apr 14, 2020 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o