[release-5.29] Backport #2403 aka CVE-2024-3727#2415

Closed

dcermak wants to merge 6 commits into

containers:release-5.29from

dcermak:backport-2403

Commits on May 14, 2024

Validate the tags returned by a registry

mtrmac
authored and
dcermak
committed
Refactor the error handling path of saveStream

mtrmac
authored and
dcermak
committed
Refactor the error handling further

mtrmac
authored and
dcermak
committed
Call .Validate() before digest.Digest.String() if necessary

mtrmac
authored and
dcermak
committed
Validate digests before using them

mtrmac
authored and
dcermak
committed
Call .Validate() before digest.Hex() / digest.Encoded()

mtrmac
authored and
dcermak
committed