Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v0.21] cherry-picks for v0.21.3 #3067

Merged
merged 2 commits into from
Mar 17, 2025
Merged

Conversation

crazy-max
Copy link
Member

Picks for CVE-2025-0495

tonistiigi and others added 2 commits March 17, 2025 16:57
User might pass a value that they don't expect to
be kept in trace storage. For example some cache backends
allow passing authentication tokens with a flag.

Instead use known primary config values as attributes
of the root span.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
@crazy-max crazy-max marked this pull request as ready for review March 17, 2025 16:08
@crazy-max crazy-max merged commit 7b5fecb into docker:v0.21 Mar 17, 2025
127 checks passed
@crazy-max crazy-max deleted the 0.21_picks_0.21.3 branch March 17, 2025 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants