Skip to content

umoci 0.4.4
Compare
Choose a tag to compare
@cyphar cyphar released this 31 Jan 05:57
v0.4.4
This tag was signed with the committer’s verified signature.
cyphar Aleksa Sarai
GPG key ID: 9E18AA267DDB8DB4
Learn about vigilant mode.
c2fe630
This commit was signed with the committer’s verified signature.
cyphar Aleksa Sarai
GPG key ID: 9E18AA267DDB8DB4
Learn about vigilant mode.
  • Full-stack verification of blob hashes and descriptor sizes is now done on
    all operations, improving our hardening against bad blobs (we already did
    some verification of layer DiffIDs but this is far more thorough).
    openSUSE/umoci#278 openSUSE/umoci#280 openSUSE/umoci#282

Thanks to all of the people that made this release possible:

Signed-off-by: Aleksa Sarai asarai@suse.de

Assets 7
Loading