Project

Profile

Help

Issue #8303

push of an image that contains foreign layers should not succeed

Added by ipanova@redhat.com 9 months ago. Updated 17 days ago.

Status:
MODIFIED
Priority:
Normal
Sprint/Milestone:
-
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Platform Release:
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Sprint 109
Quarter:

Description

https://github.com/pulp/pulp_container/blob/2.3/pulp_container/app/registry_api.py#L459

Our upload logic does not seem to check on the type of the blob that is being uploaded. Foreign layers should be rejected. We should check on the content_type provided in the request.

We should audit manifests too.

https://github.com/pulp/pulp_container/blob/2.3/pulp_container/app/registry_api.py#L576

Associated revisions

Revision 0a8fe8b5 View on GitHub
Added by ipanova@redhat.com 17 days ago

Fixed blob content_type headers and added blob/manifest validation.

closes #9571 closes #8303

Revision 0a8fe8b5 View on GitHub
Added by ipanova@redhat.com 17 days ago

Fixed blob content_type headers and added blob/manifest validation.

closes #9571 closes #8303

History

#1 Updated by ipanova@redhat.com 9 months ago

  • Triaged changed from No to Yes

#2 Updated by ipanova@redhat.com about 2 months ago

  • Status changed from NEW to ASSIGNED
  • Assignee set to ipanova@redhat.com
  • Sprint set to Sprint 107

#3 Updated by ipanova@redhat.com about 2 months ago

  • Status changed from ASSIGNED to POST

#4 Updated by rchan about 1 month ago

  • Sprint changed from Sprint 107 to Sprint 108

#5 Updated by rchan 29 days ago

  • Sprint changed from Sprint 108 to Sprint 109

#6 Updated by ipanova@redhat.com 17 days ago

  • Status changed from POST to MODIFIED

Please register to edit this issue

Also available in: Atom PDF