0de84f0190
no changes in vendored files full diff: https://github.com/golang/crypto/compare/v0.16.0...v0.17.0 from the security mailing: > Hello gophers, > > Version v0.17.0 of golang.org/x/crypto fixes a protocol weakness in the > golang.org/x/crypto/ssh package that allowed a MITM attacker to compromise > the integrity of the secure channel before it was established, allowing > them to prevent transmission of a number of messages immediately after > the secure channel was established without either side being aware. > > The impact of this attack is relatively limited, as it does not compromise > confidentiality of the channel. Notably this attack would allow an attacker > to prevent the transmission of the SSH2_MSG_EXT_INFO message, disabling a > handful of newer security features. > > This protocol weakness was also fixed in OpenSSH 9.6. > > Thanks to Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk from Ruhr > University Bochum for reporting this issue. > > This is CVE-2023-48795 and Go issue https://go.dev/issue/64784. > > Cheers, > Roland on behalf of the Go team Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
91 lines
3.9 KiB
Modula-2
91 lines
3.9 KiB
Modula-2
module github.com/docker/cli
|
|
|
|
// 'vendor.mod' enables use of 'go mod vendor' to managed 'vendor/' directory.
|
|
// There is no 'go.mod' file, as that would imply opting in for all the rules
|
|
// around SemVer, which this repo cannot abide by as it uses CalVer.
|
|
|
|
go 1.19
|
|
|
|
require (
|
|
dario.cat/mergo v1.0.0
|
|
github.com/containerd/containerd v1.7.11
|
|
github.com/creack/pty v1.1.18
|
|
github.com/distribution/reference v0.5.0
|
|
github.com/docker/distribution v2.8.3+incompatible
|
|
github.com/docker/docker v25.0.0-beta.2.0.20231213091442-f3cc93630ed8+incompatible // master (v25.0.0-dev)
|
|
github.com/docker/docker-credential-helpers v0.8.0
|
|
github.com/docker/go-connections v0.4.1-0.20231110212414-fa09c952e3ea
|
|
github.com/docker/go-units v0.5.0
|
|
github.com/fvbommel/sortorder v1.0.2
|
|
github.com/gogo/protobuf v1.3.2
|
|
github.com/google/go-cmp v0.5.9
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
|
|
github.com/mattn/go-runewidth v0.0.14
|
|
github.com/mitchellh/mapstructure v1.3.2
|
|
github.com/moby/patternmatcher v0.6.0
|
|
github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
|
|
github.com/moby/sys/sequential v0.5.0
|
|
github.com/moby/sys/signal v0.7.0
|
|
github.com/moby/term v0.5.0
|
|
github.com/morikuni/aec v1.0.0
|
|
github.com/opencontainers/go-digest v1.0.0
|
|
github.com/opencontainers/image-spec v1.1.0-rc5
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/sirupsen/logrus v1.9.3
|
|
github.com/spf13/cobra v1.8.0
|
|
github.com/spf13/pflag v1.0.5
|
|
github.com/theupdateframework/notary v0.7.1-0.20210315103452-bf96a202a09a
|
|
github.com/tonistiigi/go-rosetta v0.0.0-20200727161949-f79598599c5d
|
|
github.com/xeipuuv/gojsonschema v1.2.0
|
|
golang.org/x/sync v0.3.0
|
|
golang.org/x/sys v0.15.0
|
|
golang.org/x/term v0.15.0
|
|
golang.org/x/text v0.14.0
|
|
gopkg.in/yaml.v2 v2.4.0
|
|
gotest.tools/v3 v3.5.1
|
|
tags.cncf.io/container-device-interface v0.6.2
|
|
)
|
|
|
|
require (
|
|
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
|
|
github.com/Microsoft/go-winio v0.6.1 // indirect
|
|
github.com/Microsoft/hcsshim v0.11.4 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/cespare/xxhash/v2 v2.2.0 // indirect
|
|
github.com/containerd/log v0.1.0 // indirect
|
|
github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c // indirect
|
|
github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // indirect
|
|
github.com/docker/go-metrics v0.0.1 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/go-logr/logr v1.2.4 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/golang/protobuf v1.5.3 // indirect
|
|
github.com/gorilla/mux v1.8.1 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/klauspost/compress v1.17.2 // indirect
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
|
|
github.com/miekg/pkcs11 v1.1.1 // indirect
|
|
github.com/moby/sys/symlink v0.2.0 // indirect
|
|
github.com/moby/sys/user v0.1.0 // indirect
|
|
github.com/prometheus/client_golang v1.14.0 // indirect
|
|
github.com/prometheus/client_model v0.3.0 // indirect
|
|
github.com/prometheus/common v0.42.0 // indirect
|
|
github.com/prometheus/procfs v0.9.0 // indirect
|
|
github.com/rivo/uniseg v0.2.0 // indirect
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
go.etcd.io/etcd/raft/v3 v3.5.6 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 // indirect
|
|
go.opentelemetry.io/otel v1.19.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.19.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.19.0 // indirect
|
|
golang.org/x/crypto v0.17.0 // indirect
|
|
golang.org/x/mod v0.11.0 // indirect
|
|
golang.org/x/net v0.17.0 // indirect
|
|
golang.org/x/time v0.3.0 // indirect
|
|
golang.org/x/tools v0.10.0 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20230711160842-782d3b101e98 // indirect
|
|
google.golang.org/grpc v1.58.3 // indirect
|
|
google.golang.org/protobuf v1.31.0 // indirect
|
|
)
|