github-featured / apple--containerization

发布

0 发布 83 Git 标签

RSS 订阅源
  • 0.42.0 c0185aea5c
    比较

    Improve security across containerization (#898)

    frostbyte_neo 发布于 2026-08-28 20:22:06 +00:00 | 15 次提交 在此版本后已推送到 main

    This PR fixes a number of issues:

    • validate descriptor digests before filesystem use
    • validate container and exec ids before building paths in
      ManagedContainer
    • Check for attribute length when consuming extended attributes in
      ContainerizationEXT4
    • Check directory name length when formatting an ext4 fs
    • Prevent OCI image layout load from reading host files through a
      symlink
    • Validate registry auth realm before exchanging credentials

    Signed-off-by: Kathryn Baldauf k_baldauf@apple.com
    Co-authored-by: John Logan john_logan@apple.com
    Co-authored-by: Raj Aryan Singh rajaryan_singh@apple.com
    Co-authored-by: Raj realrajaryan@gmail.com

    下载附件