Affected by GO-2022-0390 and 8 other vulnerabilities

GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker

GO-2024-3304: Moby Race Condition vulnerability in github.com/moby/moby

GO-2024-3305: Moby Race Condition vulnerability in github.com/moby/moby

GO-2026-4883: Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

GO-2026-4887: Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker

GO-2026-5617: Docker: Race condition in docker cp allows bind mount redirection to host path in github.com/docker/docker

GO-2026-5668: Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap in github.com/docker/docker

GO-2026-5746: Docker: `PUT /containers/{id}/archive` executes container binary on the host in github.com/docker/docker

distribution

package

v1.13.0-rc3 Latest Latest Go to latest Published: Dec 5, 2016 License: Apache-2.0 Imports: 19 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/moby/moby

Links

Documentation ¶

Index ¶

Constants
Variables
func GetRef(name string) (reference.Named, error)
func GetTag(ref reference.Named) string
func Push(name string, rs registry.Service, metaHeader http.Header, ...) (digest.Digest, error)
func WritePullData(pd PullData, dest string, extract bool) error
type PullData
- func Pull(ref reference.Named, rs registry.Service, metaheader http.Header, ...) (PullData, error)

Constants ¶

View Source

const DefaultTag = "latest"

DefaultTag is the default tag for plugins

Variables ¶

View Source

var ErrUnsupportedMediaType = errors.New("content is not a plugin")

ErrUnsupportedMediaType indicates we are pulling content that's not a plugin

View Source

var ErrUnsupportedRegistry = errors.New("only V2 repositories are supported for plugin distribution")

ErrUnsupportedRegistry indicates that the registry does not support v2 protocol

Functions ¶

func GetRef ¶

func GetRef(name string) (reference.Named, error)

GetRef returns the distribution reference for a given name.

func GetTag ¶

func GetTag(ref reference.Named) string

GetTag returns the tag associated with the given reference name.

func Push ¶

func Push(name string, rs registry.Service, metaHeader http.Header, authConfig *types.AuthConfig, config io.ReadCloser, layers io.ReadCloser) (digest.Digest, error)

Push pushes a plugin to a registry.

func WritePullData ¶

func WritePullData(pd PullData, dest string, extract bool) error

WritePullData extracts manifest and rootfs to the disk.

Types ¶

type PullData ¶

type PullData interface {
	Config() ([]byte, error)
	Layer() (io.ReadCloser, error)
}

PullData is the plugin config and the rootfs

func Pull ¶

func Pull(ref reference.Named, rs registry.Service, metaheader http.Header, authConfig *types.AuthConfig) (PullData, error)

Pull downloads the plugin from Store

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL