Project

Profile

Help

Actions
Send by e-mail Copy link

Issue #8303

closed

push of an image that contains foreign layers should not succeed

Added by ipanova@redhat.com about 3 years ago. Updated over 2 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
ipanova@redhat.com
Sprint/Milestone:
2.10.0
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Platform Release:
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Sprint 109
Quarter:

Description

https://github.com/pulp/pulp_container/blob/2.3/pulp_container/app/registry_api.py#L459

Our upload logic does not seem to check on the type of the blob that is being uploaded. Foreign layers should be rejected. We should check on the content_type provided in the request.

We should audit manifests too.

https://github.com/pulp/pulp_container/blob/2.3/pulp_container/app/registry_api.py#L576

Actions
Copy link
 #1

Updated by ipanova@redhat.com about 3 years ago

  • Triaged changed from No to Yes
Actions
Copy link
 #2

Updated by ipanova@redhat.com over 2 years ago

  • Status changed from NEW to ASSIGNED
  • Assignee set to ipanova@redhat.com
  • Sprint set to Sprint 107
Actions
Copy link
 #3

Updated by ipanova@redhat.com over 2 years ago

  • Status changed from ASSIGNED to POST
Actions
Copy link
 #4

Updated by rchan over 2 years ago

  • Sprint changed from Sprint 107 to Sprint 108
Actions
Copy link
 #5

Updated by rchan over 2 years ago

  • Sprint changed from Sprint 108 to Sprint 109

Added by ipanova@redhat.com over 2 years ago

Revision 0a8fe8b5 | View on GitHub

Fixed blob content_type headers and added blob/manifest validation.

closes #9571 closes #8303

Added by ipanova@redhat.com over 2 years ago

Revision 0a8fe8b5 | View on GitHub

Fixed blob content_type headers and added blob/manifest validation.

closes #9571 closes #8303

Actions
Copy link
 #6

Updated by ipanova@redhat.com over 2 years ago

  • Status changed from POST to MODIFIED
Actions
Copy link
 #7

Updated by ipanova@redhat.com over 2 years ago

  • Sprint/Milestone set to 2.10.0
Actions
Copy link
 #8

Updated by pulpbot over 2 years ago

  • Status changed from MODIFIED to CLOSED - CURRENTRELEASE
Actions
Send by e-mail Copy link

Also available in: Atom PDF