specconv

package

Go to main page

Versions in this module

v1

v1.2.2

Nov 15, 2024

v1.2.1

Nov 1, 2024

v1.2.0

Oct 21, 2024

v1.2.0-rc.3

Sep 3, 2024

v1.2.0-rc.2

Jun 26, 2024 GO-2024-3110

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.2.0-rc.1

Apr 3, 2024 GO-2024-3110

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.15

Oct 4, 2024

v1.1.14

Sep 3, 2024

v1.1.13

Jun 13, 2024 GO-2024-3110

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.12

Jan 23, 2024 GO-2024-3110

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.11

Jan 2, 2024 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.10

Nov 1, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.9

Aug 10, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.8

Jul 19, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.7

Apr 26, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.6

Apr 11, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.5

Mar 29, 2023 GO-2024-2491 +1 more

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.4

Aug 24, 2022 GO-2023-1627 +4 more

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.3

Jun 8, 2022 GO-2023-1627 +4 more

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.2

May 5, 2022 GO-2023-1627 +4 more

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.1

Mar 28, 2022 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.1.0

Jan 17, 2022 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ func KnownMountOptions() []string — linux/amd64

+ func KnownNamespaces() []string — linux/amd64

v1.1.0-rc.1

Dec 14, 2021 GO-2022-0274 +6 more

GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.3

Dec 3, 2021 GO-2022-0274 +6 more

GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.2

Aug 20, 2021 GO-2022-0274 +6 more

GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.1

Jul 16, 2021 GO-2022-0274 +6 more

GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0

Jun 17, 2021 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ var AllowedDevices = []*devices.Device — linux/amd64

+ func CreateCgroupConfig(opts *CreateOpts, defaultDevs []*devices.Device) (*configs.Cgroup, error) — linux/amd64

+ func Example() *specs.Spec

+ func SetupSeccomp(config *specs.LinuxSeccomp) (*configs.Seccomp, error) — linux/amd64

+ func ToRootless(spec *specs.Spec)

type CreateOpts — linux/amd64

+ NoNewKeyring bool

+ RootlessCgroups bool

+ RootlessEUID bool

v1.0.0-rc95

May 19, 2021 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc94

May 10, 2021 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc93

Feb 3, 2021 GO-2022-0452 +5 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc92

Aug 5, 2020 GO-2022-0452 +4 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc91

Jun 30, 2020 GO-2022-0452 +4 more

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc90

Jan 22, 2020 GO-2022-0396 +5 more

GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc9

Sep 30, 2019 GO-2021-0087 +6 more

GO-2021-0087: Race condition in github.com/opencontainers/runc

GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc8

Apr 24, 2019 GO-2021-0085 +7 more

GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

GO-2021-0087: Race condition in github.com/opencontainers/runc

GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

v1.0.0-rc7

Mar 28, 2019 GO-2021-0085 +7 more