user

Oct 21, 2024

Changes in this version

+ func CurrentProcessGIDMap() ([]user.IDMap, error) — js/wasm, windows/amd64

+ func CurrentProcessUIDMap() ([]user.IDMap, error) — js/wasm, windows/amd64

+ func CurrentUserSubGIDs() ([]user.SubID, error) — js/wasm, windows/amd64

+ func CurrentUserSubUIDs() ([]user.SubID, error) — js/wasm, windows/amd64

Jun 26, 2024 GO-2024-3110

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Apr 3, 2024 GO-2024-3110

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jun 13, 2024 GO-2024-3110

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jan 23, 2024 GO-2024-3110

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jan 2, 2024 GO-2024-2491 +1 more

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Nov 1, 2023 GO-2024-2491 +1 more

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Aug 10, 2023 GO-2024-2491 +1 more

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jul 19, 2023 GO-2024-2491 +1 more

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Apr 26, 2023 GO-2024-2491 +1 more

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Apr 11, 2023 GO-2024-2491 +1 more

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Mar 29, 2023 GO-2024-2491 +1 more

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Aug 24, 2022 GO-2023-1627 +4 more

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jun 8, 2022 GO-2023-1627 +4 more

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

May 5, 2022 GO-2023-1627 +4 more

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Mar 28, 2022 GO-2022-0452 +5 more

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jan 17, 2022 GO-2022-0452 +5 more

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Dec 14, 2021 GO-2022-0274 +6 more

  GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Dec 3, 2021 GO-2022-0274 +6 more

  GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Aug 20, 2021 GO-2022-0274 +6 more

  GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jul 16, 2021 GO-2022-0274 +6 more

  GO-2022-0274: Namespace restriction bypass in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jun 17, 2021 GO-2022-0452 +5 more

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ type IDMap struct

+ Count int64

+ ID int64

+ ParentID int64

+ func CurrentProcessGIDMap() ([]IDMap, error)

+ func CurrentProcessUIDMap() ([]IDMap, error)

+ func ParseIDMap(r io.Reader) ([]IDMap, error)

+ func ParseIDMapFile(path string) ([]IDMap, error)

+ func ParseIDMapFileFilter(path string, filter func(IDMap) bool) ([]IDMap, error)

+ func ParseIDMapFilter(r io.Reader, filter func(IDMap) bool) ([]IDMap, error)

+ type SubID struct

+ Count int64

+ Name string

+ SubID int64

+ func CurrentUserSubGIDs() ([]SubID, error)

+ func CurrentUserSubUIDs() ([]SubID, error)

+ func ParseSubID(subid io.Reader) ([]SubID, error)

+ func ParseSubIDFile(path string) ([]SubID, error)

+ func ParseSubIDFileFilter(path string, filter func(SubID) bool) ([]SubID, error)

+ func ParseSubIDFilter(r io.Reader, filter func(SubID) bool) ([]SubID, error)

May 19, 2021 GO-2022-0452 +5 more

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2023-1627: Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

May 10, 2021 GO-2022-0452 +5 more

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Feb 3, 2021 GO-2022-0452 +5 more

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-2491: Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Aug 5, 2020 GO-2022-0452 +4 more

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jun 30, 2020 GO-2022-0452 +4 more

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jan 22, 2020 GO-2022-0396 +5 more

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Sep 30, 2019 GO-2021-0087 +6 more

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Apr 24, 2019 GO-2021-0085 +7 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Mar 28, 2019 GO-2021-0085 +7 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Nov 21, 2018 GO-2021-0085 +7 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Feb 27, 2018 GO-2021-0085 +7 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Aug 2, 2017 GO-2021-0085 +7 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Mar 21, 2017 GO-2021-0085 +7 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Sep 29, 2016 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jan 22, 2020 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jun 3, 2016 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Apr 25, 2016 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Apr 12, 2016 GO-2021-0085 +8 more

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ var ErrNoGroupEntries = errors.New("no matching entries in group file")

+ var ErrNoPasswdEntries = errors.New("no matching entries in passwd file")

Mar 10, 2016 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Feb 10, 2016 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jan 26, 2016 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Dec 11, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Nov 20, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Sep 11, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Aug 4, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jul 17, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Jul 16, 2015 GO-2021-0070 +9 more

  GO-2021-0070: Privilege escalation in github.com/opencontainers/runc

  GO-2021-0085: Authorization bypass in github.com/opencontainers/runc

  GO-2021-0087: Race condition in github.com/opencontainers/runc

  GO-2022-0396: devices resource list treated as a blacklist by default in github.com/opencontainers/runc

  GO-2022-0452: Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

  GO-2022-0835: Information Exposure in RunC in github.com/opencontainers/runc

  GO-2022-0914: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc

  GO-2023-1682: rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc in github.com/opencontainers/runc

  GO-2023-1683: runc AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

  GO-2024-3110: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

Changes in this version

+ var ErrRange = fmt.Errorf("Uids and gids must be in range %d-%d", minId, maxId)

+ var ErrUnsupported = errors.New("user lookup: operating system does not provide passwd-formatted data")

+ func GetAdditionalGroups(additionalGroups []string, group io.Reader) ([]int, error)

+ func GetAdditionalGroupsPath(additionalGroups []string, groupPath string) ([]int, error)

+ func GetGroup() (io.ReadCloser, error)

+ func GetGroupPath() (string, error)

+ func GetPasswd() (io.ReadCloser, error)

+ func GetPasswdPath() (string, error)

+ type ExecUser struct

+ Gid int

+ Home string

+ Sgids []int

+ Uid int

+ func GetExecUser(userSpec string, defaults *ExecUser, passwd, group io.Reader) (*ExecUser, error)

+ func GetExecUserPath(userSpec string, defaults *ExecUser, passwdPath, groupPath string) (*ExecUser, error)

+ type Group struct

+ Gid int

+ List []string

+ Name string

+ Pass string

+ func CurrentGroup() (Group, error)

+ func LookupGid(gid int) (Group, error)

+ func LookupGroup(groupname string) (Group, error)

+ func ParseGroup(group io.Reader) ([]Group, error)

+ func ParseGroupFile(path string) ([]Group, error)

+ func ParseGroupFileFilter(path string, filter func(Group) bool) ([]Group, error)

+ func ParseGroupFilter(r io.Reader, filter func(Group) bool) ([]Group, error)

+ type User struct

+ Gecos string

+ Gid int

+ Home string

+ Name string

+ Pass string

+ Shell string

+ Uid int

+ func CurrentUser() (User, error)

+ func LookupUid(uid int) (User, error)

+ func LookupUser(username string) (User, error)

+ func ParsePasswd(passwd io.Reader) ([]User, error)

+ func ParsePasswdFile(path string) ([]User, error)

+ func ParsePasswdFileFilter(path string, filter func(User) bool) ([]User, error)

+ func ParsePasswdFilter(r io.Reader, filter func(User) bool) ([]User, error)