starred/cli
1
0
Fork 0
mirror of https://github.com/docker/cli.git synced 2026-08-28 18:14:28 -05:00
Code Issues Packages Projects Releases Wiki Activity
12,980 Commits 13 Branches 321 Tags
29.x
Commit Graph
5 Commits
Author SHA1 Message Date
Sebastiaan van Stijn 8fda97b545 vendor: github.com/moby/sys/user v0.4.1 
- user: prevent possible DoS via unbounded parsing of user and group
  database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
  as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
  Improve handling of numeric user/group to prevent looking up numeric
  values as usernames. This fixes a similar issue as [CVE-2026-46680] in
  containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.

[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w

full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-06-25 21:31:42 +02:00
Sebastiaan van Stijn edd2f7d9fb vendor: github.com/moby/sys/user v0.4.0 
full diff: https://github.com/moby/sys/compare/user/v0.3.0...user/v0.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-04-04 22:01:29 +02:00
Sebastiaan van Stijn 6440816c7c vendor: github.com/docker/docker 2269acc7a31d (master, v-next) 
removes (indirect) dependencie on the moby/sys/user/userns package, which
was retracted and moved to moby/sys/userns

- full diff: https://github.com/docker/docker/compare/f3cf9359bdf6...2269acc7a31df0241e9667d5df98be6a4db5ba6a

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-08-08 13:37:58 +02:00
Sebastiaan van Stijn f0a29af0f3 vendor: docker/docker 2b1097f08088 (removes containerd dependency) 
full diff: https://github.com/docker/docker/compare/aae044039ca4...2b1097f08088fd387a01c6d6a2a0f6916a39b872

The userns package in libcontainer was integrated into the moby/sys/user
module at commit 3778ae603c706494fd1e2c2faf83b406e38d687d.

The userns package is used in many places, and currently either depends
on runc/libcontainer, or on containerd, both of which have a complex
dependency tree. This patch is part of a series of patches to unify the
implementations, and to migrate toward that implementation to simplify
the dependency tree.

[3778ae603c706494fd1e2c2faf83b406e38d687d]: https://github.com/opencontainers/runc/commit/3778ae603c706494fd1e2c2faf83b406e38d687d

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-07-25 14:57:30 +02:00
Sebastiaan van Stijn 663a89b7ad vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev) 
full diff: https://github.com/moby/moby/compare/cdb3f9fb8dca...fc4d035e7a4e

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2023-10-26 09:30:44 +02:00