Davanum Srinivas
c825d80bbf
Update security-critical authentication and protobuf dependencies
...
This PR updates security-critical dependencies addressing authentication
and data parsing vulnerabilities.
**Authentication Security:**
- github.com/coreos/go-oidc: v2.3.0 -> v2.5.0
- Security fix: Now verifies token signature BEFORE validating payload
- Prevents potential processing of tampered tokens before cryptographic
verification
- github.com/cyphar/filepath-securejoin: v0.6.0 -> v0.6.1
- Security fix: Fixed seccomp fallback logic - library now properly falls
back to safer O_PATH resolver when openat2(2) is denied by seccomp-bpf
- Fixed file descriptor leak in openat2 wrapper during RESOLVE_IN_ROOT
- cyphar.com/go-pathrs: v0.2.1 -> v0.2.2
- Companion update to filepath-securejoin
**Protobuf Security:**
- google.golang.org/protobuf: v1.36.8 -> v1.36.11
- Security fix: Added recursion limit check in lazy decoding validation
- Prevents potential stack exhaustion attacks via maliciously crafted
protobuf messages
- Also adds support for URL chars in type URLs in text-format
These updates are critical for:
- OIDC authentication in kube-apiserver
- Container filesystem path resolution (used by container runtimes)
- Protobuf message parsing throughout the codebase
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2026-01-13 16:56:16 -05:00
Davanum Srinivas
faf30b3067
update github.com/coreos/go-oidc to v2.3.0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2025-01-22 15:27:54 -05:00
Akhil Mohan
d7270f4ba7
dependencies: update go-oidc to v2.2.1
...
Signed-off-by: Akhil Mohan <akhilerm@gmail.com >
2023-04-13 23:25:57 -07:00
Benjamin Elder
56e092e382
hack/update-bazel.sh
2021-02-28 15:17:29 -08:00
Anders Eknert
5e6162c614
Honour "nbf" claim if present in ID token
2019-08-31 08:45:02 +02:00
Jordan Liggitt
d0261b1077
generated: hack/update-vendor.sh
2019-04-03 10:19:40 -04:00
Jeff Grafton
23ceebac22
Run hack/update-bazel.sh
2018-06-22 16:22:57 -07:00
Jeff Grafton
a725660640
Update to gazelle 0.12.0 and run hack/update-bazel.sh
2018-06-22 16:22:18 -07:00
Eric Chiang
379af0405c
bump(github.com/coreos/go-oidc): 065b426bd41667456c1a924468f507673629c46b
2018-02-16 10:57:52 -08:00
Jeff Grafton
aee5f457db
update BUILD files
2017-10-15 18:18:13 -07:00
Jeff Grafton
653d05c169
Regenerate all BUILD files in vendor/ from scratch using gazelle
2017-08-16 15:48:25 -07:00
Jeff Grafton
a7f49c906d
Use buildozer to delete licenses() rules except under third_party/
2017-08-11 09:32:39 -07:00
Jeff Grafton
33276f06be
Use buildozer to remove deprecated automanaged tags
2017-08-11 09:31:50 -07:00
Taylor Thomas
9fa27f6bf0
bump(github.com/coreos/go-oidc): a4973d9a4225417aecf5d450a9522f00c1f7130f
2017-07-19 18:02:06 -07:00
Mike Danese
a05c3c0efd
autogenerated
2017-04-14 10:40:57 -07:00
Curtis Allen
7d409b3731
bump(github.com/coreos/go-oidc): be73733bb8cc830d0205609b95d125215f8e9c70
...
Includes updates that enable OIDC with OKTA as a IDP
2017-03-10 10:53:07 -07:00
Eric Chiang
16edba2de8
vendor: update go-oidc
...
This change updates the github.com/coreos/go-oidc package.
Notable changes:
- Throw out JWTs with invalid claims early (coreos/go-oidc#97, brougt up in #30457 )
- Remove the capnslog dependency (coreos/go-oidc#95 )
- Support for Azure AD oddities (coreos/go-oidc#87 )
2016-08-26 16:35:12 -07:00
Girish Kalele
6de83d5853
Update Godeps for github.com/skynetservices/skydns and github.com/miekg/dns
2016-06-29 14:05:43 -07:00
Dawn Chen
1ea5c460bc
Bump cAdvisor to v0.23.4
2016-06-17 16:26:39 -07:00
Davide Agnello
bb1ae12906
Vendor/Godep updates
2016-06-08 18:17:42 -07:00
Bobby Rullo
82bdf9051c
Update github.com/coreos/go-oidc
2016-05-16 16:37:33 -07:00
Tim Hockin
3c0c5ed4e0
Move deps from _workspace/ to vendor/
...
godep restore
pushd $GOPATH/src/github.com/appc/spec
git co master
popd
go get go4.org/errorutil
rm -rf Godeps
godep save ./...
git add vendor
git add -f $(git ls-files --other vendor/)
git co -- Godeps/LICENSES Godeps/.license_file_state Godeps/OWNERS
2016-05-08 20:30:21 -07:00
