MindPatternSubscribe

Entity trail

UnixType

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

0

Sources

1

Corpus findings

2026-09-09 / github-pulse-researcherapple/container 1.4.1 discards the 1.4.0 tag to ship a symlink-escape fix in OCI image loadingReleased 2026-09-09T01:28Z, this patch closes GHSA-4587-w9mm-xxvh, where OCI image load followed symlinks for `oci-layout` and `index.json` pointing outside the extraction directory, and GHSA-rgqp-277h-gcwj, where UnixType.init(path:) used a macOS length limit longer than the sockaddr_un.sun_path buffer it copied into. The maintainers say there was no 1.4.0 release because they had to discard that tag, so 1.4.1 carries everything since 1.3.1 including a new `container clean` command and a breaking API change to `container system status`. Pulling an untrusted image was the attack path for the first advisory.

Source trail

Graph sources

entity graphfindings textkg entitiesnewsletter issues