Affected by GO-2025-4100 and 9 other vulnerabilities

GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

GO-2026-5378: containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

GO-2026-6444: containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd

GO-2026-6597: Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd

The highest tagged major version is v2.

local

package

v1.7.27 Latest Latest Go to latest Published: Mar 17, 2025 License: Apache-2.0 Imports: 21 Imported by: 463

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/containerd/containerd

Links

Documentation ¶

Rendered for

Index ¶

func NewLabeledStore(root string, ls LabelStore) (content.Store, error)
func NewStore(root string) (content.Store, error)
func OpenReader(p string) (content.ReaderAt, error)
type LabelStore

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func NewLabeledStore ¶

func NewLabeledStore(root string, ls LabelStore) (content.Store, error)

NewLabeledStore returns a new content store using the provided label store

Note: content stores which are used underneath a metadata store may not require labels and should use `NewStore`. `NewLabeledStore` is primarily useful for tests or standalone implementations.

func NewStore ¶

func NewStore(root string) (content.Store, error)

NewStore returns a local content store

func OpenReader ¶ added in v1.5.0

func OpenReader(p string) (content.ReaderAt, error)

OpenReader creates ReaderAt from a file

Types ¶

type LabelStore ¶

type LabelStore interface {
	// Get returns all the labels for the given digest
	Get(digest.Digest) (map[string]string, error)

	// Set sets all the labels for a given digest
	Set(digest.Digest, map[string]string) error

	// Update replaces the given labels for a digest,
	// a key with an empty value removes a label.
	Update(digest.Digest, map[string]string) (map[string]string, error)
}

LabelStore is used to store mutable labels for digests

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL