Sebastiaan van Stijn
1a0269b0fe
vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
...
full diff: 5770296d90...3147a52a75
This version contains a fix for CVE-2022-27191 (not sure if it affects us).
From the golang mailing list:
Hello gophers,
Version v0.0.0-20220315160706-3147a52a75dd of golang.org/x/crypto/ssh implements
client authentication support for signature algorithms based on SHA-2 for use with
existing RSA keys.
Previously, a client would fail to authenticate with RSA keys to servers that
reject signature algorithms based on SHA-1. This includes OpenSSH 8.8 by default
and—starting today March 15, 2022 for recently uploaded keys.
We are providing this announcement as the error (“ssh: unable to authenticate”)
might otherwise be difficult to troubleshoot.
Version v0.0.0-20220314234659-1baeb1ce4c0b (included in the version above) also
fixes a potential security issue where an attacker could cause a crash in a
golang.org/x/crypto/ssh server under these conditions:
- The server has been configured by passing a Signer to ServerConfig.AddHostKey.
- The Signer passed to AddHostKey does not also implement AlgorithmSigner.
- The Signer passed to AddHostKey does return a key of type “ssh-rsa” from its PublicKey method.
Servers that only use Signer implementations provided by the ssh package are
unaffected. This is CVE-2022-27191.
Alla prossima,
Filippo for the Go Security team
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
3 years ago
CrazyMax
1ca30a58c2
Merge pull request #1003 from developer-guy/feature/1001
...
feat: printing driver options
3 years ago
CrazyMax
1246e8da3a
Merge pull request #1008 from thaJeztah/bump_distribution
...
vendor: github.com/docker/distribution v2.8.1
3 years ago
Sebastiaan van Stijn
c0f31349a6
vendor: github.com/docker/distribution v2.8.1
...
no significant changes to code we use, but the v2.8.0 module was borked
full diff: https://github.com/docker/distribution/compare/v2.8.0...v2.8.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
3 years ago
Tõnis Tiigi
5c2d2f294d
Merge pull request #1004 from tonistiigi/update-fsutil-220315
...
vendor: update fsutil to 9ed61262
3 years ago
Batuhan Apaydın
da4c27e9af
feat: printing driver options
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
3 years ago
Tonis Tiigi
111ea95629
vendor: update fsutil to 9ed61262
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tõnis Tiigi
3adca1c17d
Merge pull request #995 from thaJeztah/replace_ioutil
...
Remove uses of deprecated io/ioutil
3 years ago
Tõnis Tiigi
6ffe22b843
Merge pull request #996 from crazy-max/buildinfo-use-helper
...
imagetools inspect: use buildinfo helper
3 years ago
CrazyMax
38311a35f2
imagetools inspect: use buildinfo helper
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
Sebastiaan van Stijn
fd62216cbc
golangci-lint: prevent io/ioutil from being used
...
The package has been deprecated since Go 1.16:
https://go.dev/doc/go1.16#ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
3 years ago
Sebastiaan van Stijn
fc7ba75fd7
Remove uses of deprecated io/ioutil
...
The package has been deprecated since Go 1.16: https://go.dev/doc/go1.16#ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
3 years ago
Tõnis Tiigi
c8f7c1e93f
Merge pull request #993 from tonistiigi/update-buildkit-220308
...
vendor: update buildkit
3 years ago
Tõnis Tiigi
b78c680207
Merge pull request #989 from crazy-max/moby-imgdgst
...
build: set remote digest when pushed with docker driver
3 years ago
Tonis Tiigi
d7412c9420
vendor: update buildkit
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
CrazyMax
a7fba7bf3a
Merge pull request #992 from tonistiigi/bake-metadata-fix
...
bake: restore consistent output for metadata
3 years ago
CrazyMax
19ff7cdadc
build: set remote digest when pushed with docker driver
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
Tonis Tiigi
c255c04eed
bake: restore consistent output for metadata
...
Metadata formatting should not depend on the number
of targets.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tõnis Tiigi
9fcea76dea
Merge pull request #977 from tonistiigi/logs-dupes
...
progress: avoid double logs when multiple targets build same step
3 years ago
Tõnis Tiigi
1416bc1d83
Merge pull request #972 from crazy-max/imagetools-inspect-order
...
imagetools inspect: keep platform order
3 years ago
CrazyMax
215a128fc1
imagetools inspect: missing manifest digest for manifest-list (json)
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
CrazyMax
4e4eea7814
imagetools inspect: deterministic platform order
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
Tõnis Tiigi
8079bd2841
Merge pull request #980 from crazy-max/imageid
...
build: return imageID when loading without docker driver
3 years ago
CrazyMax
2d5368cccc
Merge pull request #981 from tonistiigi/target-context-remove
...
build: remove target context if platform specific used
3 years ago
CrazyMax
a1256c6bb2
Merge pull request #985 from tonistiigi/multi-node-platform
...
build: fix multi-node builds with mixed platforms
3 years ago
CrazyMax
e7863eb664
build: return imageID when loading without docker driver
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
Tonis Tiigi
171c4375a1
build: fix multi-node builds with mixed platforms
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tonis Tiigi
45844805ec
build: remove target context if platform specific used
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tonis Tiigi
b77d7864fa
progress: avoid double logs when multiple targets build same step
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tõnis Tiigi
6efcee28d5
Merge pull request #973 from crazy-max/vendor-docker-cli
...
vendor: update docker/cli to 8667ccd
3 years ago
Tõnis Tiigi
3ad24524c4
Merge pull request #971 from crazy-max/fix-docs
...
docs: small fixes
3 years ago
CrazyMax
971b5d2b73
vendor: update docker/cli to 8667ccd
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
CrazyMax
94c5dde85a
docs: small fixes
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
Tõnis Tiigi
f62c02329e
Merge pull request #969 from tonistiigi/update-buildkit-20220225
...
vendor: update buildkit to 0692ad79
3 years ago
Tonis Tiigi
d2e53f5e05
vendor: update buildkit to 0692ad79
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tõnis Tiigi
7af29802d4
Merge pull request #854 from crazy-max/buildinfo-cmd
...
imagetools inspect: add --format flag
3 years ago
Tõnis Tiigi
6ac01ec9ac
Merge pull request #965 from tonistiigi/bake-context-validation
...
bake: additional support for named context on remote inputs
3 years ago
CrazyMax
20a55e9184
imagetools inspect: multi-platform support
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
CrazyMax
6c56109083
imagetools inspect: add --format flag
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
Tõnis Tiigi
dab3fe71bd
Merge pull request #967 from crazy-max/update-clidocstool
...
docs: update cli-docs-tool to v0.4.0
3 years ago
CrazyMax
9867ca279a
docs: update cli-docs-tool to v0.4.0
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
Tonis Tiigi
91e550b715
bake: add path validation for remote bake invocations
...
This is a stopgap before proper entitlements support
is implemented.
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tonis Tiigi
280c008f81
bake: make named contexts relative to remote bake input
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tõnis Tiigi
5939a23af6
Merge pull request #963 from tonistiigi/bake-contexts-error
...
bake: use better error in named contexts not supported
3 years ago
CrazyMax
7f1041164e
Merge pull request #964 from tonistiigi/update-buildkit-022322
...
vendor: update buildkit to b124b0c3
3 years ago
Tonis Tiigi
64ce211ba4
vendor: update buildkit to b124b0c3
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tonis Tiigi
b5bf28d722
bake: use better error in named contexts not supported
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
Tõnis Tiigi
10debb577e
Merge pull request #959 from tonistiigi/docker-proxy-config
...
set build-args from docker proxy configuration
3 years ago
CrazyMax
75cdea48e4
Merge pull request #962 from tonistiigi/bake-deps-error
...
build: fix deadlock on handling deps errors
3 years ago
CrazyMax
d96d7fb2dc
Merge pull request #930 from tylerlwsmith/fix-readme-typo
...
Fix typo in readme
3 years ago