mirror of
https://github.com/docker/cli.git
synced 2026-09-27 09:46:01 -04:00
Sebastiaan van Stijn
c50ce17c19
Fixed security issues - cipher/cbc_hmac: don't panic on empty ciphertext - cipher/cbc_hmac: don't panic on invalid key - json: limit stack depth - jwt: reject out-of-range NumericDate values - Check alg against pubkey curve during verify. - Reject malformed Ed25519 JWKs - jws: choose verification key per-signature Changed - Verify OpaqueSigner's Public() return is public - jws: skip signature on ErrJWKSKidNotFound - Handle JWE JSON without protected header - jws: don't strip internal whitespace before parsing JSON - jws: fewer calls to OpaqueSigner.Public() - Return a specific error when parsing empty string - Reject typed nil at Verify time full diff: https://github.com/go-jose/go-jose/compare/v4.1.4...v4.1.5 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>