mirror of
https://github.com/moby/moby.git
synced 2026-01-11 18:51:37 +00:00
ef5feb4992
full diff: https://github.com/golang/net/compare/v0.44.0...v0.45.0 From the security announcement: [security] Vulnerabilities in golang.org/x/net Hello gophers, We have tagged version v0.45.0 of golang.org/x/net in order to address two security issues. This version fixes two vulnerabilities in the golang.org/x/net/html package which could result in calls to Parse (and associated functions) executing unexpectedly slowly relative to the size of the input or never returning when encountering specific inputs. These vulnerabilities affect programs which parse untrusted HTML documents. - The parser implements the HTML specification, which contains a number of algorithms which are quadratic in complexity by design. This causes the processing time to scale non-linearly with respect to the size of the input for some HTML documents. We have imposed a depth limit of 512 for nested HTML tags, which should be high enough for the vast majority of valid HTML documents, to address this. Thanks to Jakub Guido Vranken and Jakub Ciolek for both independently reporting this issue. This is CVE-2025-47911 and Go issue https://go.dev/issue/75682. - The parser also misimplemented a portion of the HTML specification for table related tags. This could cause the parser to enter an infinite loop when encountering specific combinations of tags. Thanks to Guido Vranken for reporting this issue. This is CVE-2025-58190 and Go issue https://go.dev/issue/70179. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
265 lines
13 KiB
Modula-2
265 lines
13 KiB
Modula-2
module github.com/moby/moby/v2
|
|
|
|
go 1.24.0
|
|
|
|
require (
|
|
cloud.google.com/go/compute/metadata v0.6.0
|
|
cloud.google.com/go/logging v1.9.0
|
|
code.cloudfoundry.org/clock v1.37.0
|
|
dario.cat/mergo v1.0.2
|
|
github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6
|
|
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c
|
|
github.com/Graylog2/go-gelf v0.0.0-20191017102106-1550ee647df0
|
|
github.com/Microsoft/go-winio v0.6.2
|
|
github.com/Microsoft/hcsshim v0.13.0
|
|
github.com/RackSec/srslog v0.0.0-20180709174129-a4725f04ec91
|
|
github.com/aws/aws-sdk-go-v2 v1.30.3
|
|
github.com/aws/aws-sdk-go-v2/config v1.27.27
|
|
github.com/aws/aws-sdk-go-v2/credentials v1.17.27
|
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11
|
|
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.32.0
|
|
github.com/aws/smithy-go v1.20.3
|
|
github.com/cloudflare/cfssl v1.6.4
|
|
github.com/containerd/cgroups/v3 v3.0.5
|
|
github.com/containerd/containerd/api v1.9.0
|
|
github.com/containerd/containerd/v2 v2.1.4
|
|
github.com/containerd/continuity v0.4.5
|
|
github.com/containerd/errdefs v1.0.0
|
|
github.com/containerd/fifo v1.1.0
|
|
github.com/containerd/log v0.1.0
|
|
github.com/containerd/platforms v1.0.0-rc.1
|
|
github.com/containerd/typeurl/v2 v2.2.3
|
|
github.com/coreos/go-systemd/v22 v22.6.0
|
|
github.com/cpuguy83/tar2go v0.3.1
|
|
github.com/creack/pty v1.1.24
|
|
github.com/deckarep/golang-set/v2 v2.8.0
|
|
github.com/distribution/reference v0.6.0
|
|
github.com/docker/distribution v2.8.3+incompatible
|
|
github.com/docker/go-connections v0.6.0
|
|
github.com/docker/go-events v0.0.0-20250808211157-605354379745
|
|
github.com/docker/go-metrics v0.0.1
|
|
github.com/docker/go-units v0.5.0
|
|
github.com/fluent/fluent-logger-golang v1.10.1
|
|
github.com/godbus/dbus/v5 v5.1.0
|
|
github.com/gogo/protobuf v1.3.2
|
|
github.com/golang/gddo v0.0.0-20210115222349-20d68f94ee1f
|
|
github.com/golang/protobuf v1.5.4
|
|
github.com/google/go-cmp v0.7.0
|
|
github.com/google/uuid v1.6.0
|
|
github.com/gorilla/mux v1.8.1
|
|
github.com/hashicorp/go-immutable-radix/v2 v2.1.0
|
|
github.com/hashicorp/go-memdb v1.3.5
|
|
github.com/hashicorp/memberlist v0.4.0
|
|
github.com/hashicorp/serf v0.8.5
|
|
github.com/ishidawataru/sctp v0.0.0-20250829011129-4b890084db30
|
|
github.com/miekg/dns v1.1.66
|
|
github.com/mistifyio/go-zfs/v3 v3.0.1
|
|
github.com/mitchellh/copystructure v1.2.0
|
|
github.com/moby/buildkit v0.25.1
|
|
github.com/moby/docker-image-spec v1.3.1
|
|
github.com/moby/go-archive v0.1.0
|
|
github.com/moby/ipvs v1.1.0
|
|
github.com/moby/locker v1.0.1
|
|
github.com/moby/moby/api v1.52.0-beta.1
|
|
github.com/moby/moby/client v0.1.0-beta.0
|
|
github.com/moby/patternmatcher v0.6.0
|
|
github.com/moby/profiles/apparmor v0.1.0
|
|
github.com/moby/profiles/seccomp v0.1.0
|
|
github.com/moby/pubsub v1.0.0
|
|
github.com/moby/swarmkit/v2 v2.1.0
|
|
github.com/moby/sys/atomicwriter v0.1.0
|
|
github.com/moby/sys/mount v0.3.4
|
|
github.com/moby/sys/mountinfo v0.7.2
|
|
github.com/moby/sys/reexec v0.1.0
|
|
github.com/moby/sys/sequential v0.6.0
|
|
github.com/moby/sys/signal v0.7.1
|
|
github.com/moby/sys/symlink v0.3.0
|
|
github.com/moby/sys/user v0.4.0
|
|
github.com/moby/sys/userns v0.1.0
|
|
github.com/moby/term v0.5.2
|
|
github.com/montanaflynn/stats v0.7.1
|
|
github.com/opencontainers/cgroups v0.0.5
|
|
github.com/opencontainers/go-digest v1.0.0
|
|
github.com/opencontainers/image-spec v1.1.1
|
|
github.com/opencontainers/runtime-spec v1.2.1
|
|
github.com/opencontainers/selinux v1.12.0
|
|
github.com/pelletier/go-toml v1.9.5
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/prometheus/client_golang v1.22.0
|
|
github.com/rootless-containers/rootlesskit/v2 v2.3.5
|
|
github.com/sirupsen/logrus v1.9.3
|
|
github.com/spf13/cobra v1.10.1
|
|
github.com/spf13/pflag v1.0.10
|
|
github.com/tonistiigi/go-archvariant v1.0.0
|
|
github.com/vbatts/tar-split v0.12.1
|
|
github.com/vishvananda/netlink v1.3.1
|
|
github.com/vishvananda/netns v0.0.5
|
|
go.etcd.io/bbolt v1.4.3
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0
|
|
go.opentelemetry.io/contrib/processors/baggagecopy v0.4.0
|
|
go.opentelemetry.io/otel v1.35.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0
|
|
go.opentelemetry.io/otel/sdk v1.35.0
|
|
go.opentelemetry.io/otel/trace v1.35.0
|
|
golang.org/x/mod v0.28.0
|
|
golang.org/x/net v0.45.0
|
|
golang.org/x/sync v0.17.0
|
|
golang.org/x/sys v0.36.0
|
|
golang.org/x/text v0.29.0
|
|
golang.org/x/time v0.11.0
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a
|
|
google.golang.org/grpc v1.72.2
|
|
google.golang.org/protobuf v1.36.9
|
|
gotest.tools/v3 v3.5.2
|
|
pgregory.net/rapid v1.2.0
|
|
resenje.org/singleflight v0.4.3
|
|
tags.cncf.io/container-device-interface v1.0.1
|
|
)
|
|
|
|
require (
|
|
cloud.google.com/go v0.112.0 // indirect
|
|
cloud.google.com/go/longrunning v0.5.5 // indirect
|
|
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0 // indirect
|
|
github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 // indirect
|
|
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.5.0 // indirect
|
|
github.com/agext/levenshtein v1.2.3 // indirect
|
|
github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 // indirect
|
|
github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2 // indirect
|
|
github.com/armon/go-metrics v0.4.1 // indirect
|
|
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/bits-and-blooms/bitset v1.13.0 // indirect
|
|
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/cilium/ebpf v0.17.3 // indirect
|
|
github.com/container-storage-interface/spec v1.5.0 // indirect
|
|
github.com/containerd/accelerated-container-image v1.3.0 // indirect
|
|
github.com/containerd/console v1.0.5 // indirect
|
|
github.com/containerd/errdefs/pkg v0.3.0 // indirect
|
|
github.com/containerd/go-cni v1.1.12 // indirect
|
|
github.com/containerd/go-runc v1.1.0 // indirect
|
|
github.com/containerd/nydus-snapshotter v0.15.2 // indirect
|
|
github.com/containerd/plugin v1.0.0 // indirect
|
|
github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
|
|
github.com/containerd/ttrpc v1.2.7 // indirect
|
|
github.com/containernetworking/cni v1.3.0 // indirect
|
|
github.com/containernetworking/plugins v1.7.1 // indirect
|
|
github.com/cyphar/filepath-securejoin v0.4.1 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/dimchansky/utfbom v1.1.1 // indirect
|
|
github.com/docker/libtrust v0.0.0-20150526203908-9cbd2a1374f4 // indirect
|
|
github.com/dustin/go-humanize v1.0.0 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/fernet/fernet-go v0.0.0-20240119011108-303da6aec611 // indirect
|
|
github.com/fsnotify/fsnotify v1.9.0 // indirect
|
|
github.com/go-logr/logr v1.4.2 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/gofrs/flock v0.12.1 // indirect
|
|
github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
|
|
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
|
|
github.com/google/btree v1.1.3 // indirect
|
|
github.com/google/certificate-transparency-go v1.1.4 // indirect
|
|
github.com/google/s2a-go v0.1.7 // indirect
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
|
|
github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.12.0 // indirect
|
|
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect
|
|
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
|
|
github.com/hashicorp/go-msgpack v0.5.5 // indirect
|
|
github.com/hashicorp/go-multierror v1.1.1 // indirect
|
|
github.com/hashicorp/go-sockaddr v1.0.2 // indirect
|
|
github.com/hashicorp/golang-lru v0.5.4 // indirect
|
|
github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
|
|
github.com/in-toto/in-toto-golang v0.9.0 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/jmoiron/sqlx v1.3.3 // indirect
|
|
github.com/klauspost/compress v1.18.0 // indirect
|
|
github.com/mitchellh/hashstructure/v2 v2.0.2 // indirect
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
|
github.com/moby/sys/capability v0.4.0 // indirect
|
|
github.com/morikuni/aec v1.0.0 // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/opencontainers/runtime-tools v0.9.1-0.20250523060157-0ea5ed0382a2 // indirect
|
|
github.com/package-url/packageurl-go v0.1.1 // indirect
|
|
github.com/pelletier/go-toml/v2 v2.2.4 // indirect
|
|
github.com/petermattis/goid v0.0.0-20240813172612-4fcff4a6cae7 // indirect
|
|
github.com/philhofer/fwd v1.2.0 // indirect
|
|
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/prometheus/client_model v0.6.1 // indirect
|
|
github.com/prometheus/common v0.62.0 // indirect
|
|
github.com/prometheus/procfs v0.15.1 // indirect
|
|
github.com/sasha-s/go-deadlock v0.3.5 // indirect
|
|
github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 // indirect
|
|
github.com/secure-systems-lab/go-securesystemslib v0.6.0 // indirect
|
|
github.com/shibumi/go-pathspec v1.3.0 // indirect
|
|
github.com/spdx/tools-golang v0.5.5 // indirect
|
|
github.com/stretchr/testify v1.10.0 // indirect
|
|
github.com/tinylib/msgp v1.3.0 // indirect
|
|
github.com/tonistiigi/dchapes-mode v0.0.0-20250318174251-73d941a28323 // indirect
|
|
github.com/tonistiigi/fsutil v0.0.0-20250605211040-586307ad452f // indirect
|
|
github.com/tonistiigi/go-actions-cache v0.0.0-20250626083717-378c5ed1ddd9 // indirect
|
|
github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 // indirect
|
|
github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea // indirect
|
|
github.com/tonistiigi/vt100 v0.0.0-20240514184818-90bafcd6abab // indirect
|
|
github.com/weppos/publicsuffix-go v0.15.1-0.20210511084619-b1f36a2d6c0b // indirect
|
|
github.com/zmap/zcrypto v0.0.0-20210511125630-18f1e0152cfc // indirect
|
|
github.com/zmap/zlint/v3 v3.1.0 // indirect
|
|
go.etcd.io/etcd/client/pkg/v3 v3.5.16 // indirect
|
|
go.etcd.io/etcd/pkg/v3 v3.5.16 // indirect
|
|
go.etcd.io/etcd/raft/v3 v3.5.16 // indirect
|
|
go.etcd.io/etcd/server/v3 v3.5.16 // indirect
|
|
go.opencensus.io v0.24.0 // indirect
|
|
go.opentelemetry.io/auto/sdk v1.1.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.35.0 // indirect
|
|
go.opentelemetry.io/otel/sdk/metric v1.35.0 // indirect
|
|
go.opentelemetry.io/proto/otlp v1.5.0 // indirect
|
|
go.uber.org/multierr v1.11.0 // indirect
|
|
go.uber.org/zap v1.27.0 // indirect
|
|
golang.org/x/crypto v0.42.0 // indirect
|
|
golang.org/x/oauth2 v0.29.0 // indirect
|
|
golang.org/x/tools v0.37.0 // indirect
|
|
google.golang.org/api v0.160.0 // indirect
|
|
google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de // indirect; TODO(thaJeztah): should we keep this one aligned with the other google.golang.org/genproto/xxx modules?
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20250218202821-56aae31c358a // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
k8s.io/klog/v2 v2.130.1 // indirect
|
|
sigs.k8s.io/yaml v1.4.0 // indirect
|
|
tags.cncf.io/container-device-interface/specs-go v1.0.0 // indirect
|
|
)
|
|
|
|
exclude (
|
|
// These dependencies were updated to "master" in some modules we depend on,
|
|
// but have no code-changes since their last release. Unfortunately, this also
|
|
// causes a ripple effect, forcing all users of the containerd module to also
|
|
// update these dependencies to an unrelease / un-tagged version.
|
|
//
|
|
// Both these dependencies will unlikely do a new release in the near future,
|
|
// so exclude these versions so that we can downgrade to the current release.
|
|
//
|
|
// For additional details, see this PR and links mentioned in that PR:
|
|
// https://github.com/kubernetes-sigs/kustomize/pull/5830#issuecomment-2569960859
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
|
|
)
|
|
|
|
replace github.com/moby/moby/api => ./api
|
|
|
|
replace github.com/moby/moby/client => ./client
|