cli/vendor at 7aef4c8479b6b34998a7c3226d5a9e388f5dc511 - cli

mirror of https://github.com/docker/cli.git synced 2026-08-24 10:05:37 -05:00

Files

T

Sebastiaan van Stijn 8fda97b545 vendor: github.com/moby/sys/user v0.4.1

- user: prevent possible DoS via unbounded parsing of user and group
  database files in GHSA-mjcv-p78q-w5fw. This fixes a similar issue
  as CVE-2026-47262 in containerd.
- user: prevent falling back to looking up numeric usernames
  Improve handling of numeric user/group to prevent looking up numeric
  values as usernames. This fixes a similar issue as [CVE-2026-46680] in
  containerd.
- user: update minimum go version to go1.18
- assorted testing and linting fixes.

[CVE-2026-46680]: https://github.com/advisories/GHSA-fqw6-gf59-qr4w

full diff: https://github.com/moby/sys/compare/user/v0.4.0...user/v0.4.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

2026-06-25 21:31:42 +02:00

dario.cat/mergo

vendor: dario.cat/mergo v1.0.2

2025-08-06 01:16:17 +02:00

github.com

vendor: github.com/moby/sys/user v0.4.1

2026-06-25 21:31:42 +02:00

go.etcd.io/raft/v3

vendor: github.com/moby/swarmkit/v2 v2.1.2

2026-04-23 21:39:53 +02:00

go.opentelemetry.io

vendor: go.opentelemetry.io/otel v1.44.0, go.opentelemetry.io/contrib v0.69.0