Tags: cesanta/docker_auth
Tags
Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 in /auth_server ( #408) Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.3 to 3.0.4. - [Release notes](https://github.com/go-jose/go-jose/releases) - [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md) - [Commits](go-jose/go-jose@v3.0.3...v3.0.4) --- updated-dependencies: - dependency-name: github.com/go-jose/go-jose/v3 dependency-version: 3.0.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Security issue: resolve GHSA-2c7c-3mj9-8fqh (#381) An attacker specifying a large "p2c" value can cause JSONWebEncryption.Decrypt and JSONWebEncryption.DecryptMulti to consume large amounts of CPU, causing a DoS. Update package github.com/coreos/go-oidc to version that requires fixed version of go-jose. Note that github.com/square/go-jose is deprecated and has been replaced by github.com/go-jose/go-jose commands run: - go get -u github.com/coreos/go-oidc/v3@v3.9.0 - go mod tidy -go=1.16 see: - GHSA-2c7c-3mj9-8fqh - coreos/go-oidc#399 - https://github.com/square/go-jose - https://github.com/go-jose/go-jose Co-authored-by: Michael Cook <mcook@octo.ai>
allow LDAP mapping values to be lowercased (#348) Add the ability to lowercase values when creating label mappings from LDAP attributes. In the example the groups that the user is a member of could be mixed case which would make an ACL like: match: { account: "/.+/", name: "${labels:groups}/*" } Not possible. But with this change and the example applied it would be possible.
PreviousNext