Affected by GO-2022-0281 and 13 other vulnerabilities

GO-2022-0281: Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman

GO-2022-0416: Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

GO-2022-1151: Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

GO-2023-1942: Podman Symlink Vulnerability in github.com/containers/libpod

GO-2023-1962: Podman Elevated Container Privileges in github.com/containers/podman

GO-2024-3042: Podman vulnerable to memory-based denial of service in github.com/containers/podman

GO-2024-3169: Improper Input Validation in Buildah and Podman in github.com/containers/buildah

GO-2025-3777: Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

GO-2025-3935: podman kube play symlink traversal vulnerability in github.com/containers/podman

GO-2025-3961: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

GO-2026-5421: PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

GO-2026-5568: Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

GO-2026-6588: podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

GO-2026-6594: Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

The highest tagged major version is v4.

exec

package

v3.4.2 Latest Latest Go to latest Published: Nov 12, 2021 License: Apache-2.0 Imports: 13 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/containers/podman

Links

Open Source Insights

Documentation ¶

Overview ¶

Package exec provides utilities for executing Open Container Initiative runtime hooks.

Index ¶

Constants
func Run(ctx context.Context, hook *rspec.Hook, state []byte, stdout io.Writer, ...) (hookErr, err error)
func RuntimeConfigFilter(ctx context.Context, hooks []spec.Hook, config *spec.Spec, ...) (hookErr, err error)

Constants ¶

View Source

const DefaultPostKillTimeout = time.Duration(10) * time.Second

DefaultPostKillTimeout is the recommended default post-kill timeout.

Variables ¶

This section is empty.

Functions ¶

func Run ¶

func Run(ctx context.Context, hook *rspec.Hook, state []byte, stdout io.Writer, stderr io.Writer, postKillTimeout time.Duration) (hookErr, err error)

Run executes the hook and waits for it to complete or for the context or hook-specified timeout to expire.

func RuntimeConfigFilter ¶

func RuntimeConfigFilter(ctx context.Context, hooks []spec.Hook, config *spec.Spec, postKillTimeout time.Duration) (hookErr, err error)

RuntimeConfigFilter calls a series of hooks. But instead of passing container state on their standard input, RuntimeConfigFilter passes the proposed runtime configuration (and reads back a possibly-altered form from their standard output).

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL