Skip to content

[release/2.0] Fix TOCTOU race bug in tar extraction#13237

Merged
samuelkarp merged 1 commit into
containerd:release/2.0from
k8s-infra-cherrypick-robot:cherry-pick-12961-to-release/2.0
Apr 15, 2026
Merged

[release/2.0] Fix TOCTOU race bug in tar extraction#13237
samuelkarp merged 1 commit into
containerd:release/2.0from
k8s-infra-cherrypick-robot:cherry-pick-12961-to-release/2.0

Conversation

@k8s-infra-cherrypick-robot

@k8s-infra-cherrypick-robot k8s-infra-cherrypick-robot commented Apr 14, 2026

Copy link
Copy Markdown

This is an automated cherry-pick of #12961

/assign chrishenzie

Apply hardening to avoid TOCTOU race in tar extraction

Signed-off-by: Shachar Tal <stal@paloaltonetworks.com>
@github-project-automation github-project-automation Bot moved this from Needs Triage to Review In Progress in Pull Request Review Apr 14, 2026
@samuelkarp

Copy link
Copy Markdown
Member

/retest

@samuelkarp samuelkarp merged commit 3b43807 into containerd:release/2.0 Apr 15, 2026
87 of 88 checks passed
@github-project-automation github-project-automation Bot moved this from Review In Progress to Done in Pull Request Review Apr 15, 2026
@samuelkarp samuelkarp added impact/changelog area/storage Image Storage and removed area/runtime Runtime labels May 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

6 participants