mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-10 21:53:57 +08:00
Aleksa Sarai
ed6b1693b8
Due to the sensitive nature of these fixes, it was not possible to submit these upstream and vendor the upstream library. Instead, this patch uses a fork of github.com/opencontainers/selinux, branched at commit opencontainers/selinux@879a755db5. In order to permit downstreams to build with this patched version, a snapshot of the forked version has been included in internal/third_party/selinux. Note that since we use "go mod vendor", the patched code is usable even without being "go get"-able. Once the embargo for this issue is lifted we can submit the patches upstream and switch back to a proper upstream go.mod entry. Also, this requires us to temporarily disable the CI job we have that disallows "replace" directives. Fixes: GHSA-cgrx-mc8f-2prm CVE-2025-52881 Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
141 lines
5.2 KiB
Plaintext
141 lines
5.2 KiB
Plaintext
# github.com/checkpoint-restore/go-criu/v7 v7.2.0
|
|
## explicit; go 1.20
|
|
github.com/checkpoint-restore/go-criu/v7
|
|
github.com/checkpoint-restore/go-criu/v7/rpc
|
|
# github.com/cilium/ebpf v0.17.3
|
|
## explicit; go 1.22
|
|
github.com/cilium/ebpf
|
|
github.com/cilium/ebpf/asm
|
|
github.com/cilium/ebpf/btf
|
|
github.com/cilium/ebpf/internal
|
|
github.com/cilium/ebpf/internal/kallsyms
|
|
github.com/cilium/ebpf/internal/kconfig
|
|
github.com/cilium/ebpf/internal/linux
|
|
github.com/cilium/ebpf/internal/sys
|
|
github.com/cilium/ebpf/internal/sysenc
|
|
github.com/cilium/ebpf/internal/testutils/fdtrace
|
|
github.com/cilium/ebpf/internal/tracefs
|
|
github.com/cilium/ebpf/internal/unix
|
|
github.com/cilium/ebpf/link
|
|
# github.com/containerd/console v1.0.5
|
|
## explicit; go 1.13
|
|
github.com/containerd/console
|
|
# github.com/coreos/go-systemd/v22 v22.6.0
|
|
## explicit; go 1.23
|
|
github.com/coreos/go-systemd/v22/activation
|
|
github.com/coreos/go-systemd/v22/dbus
|
|
# github.com/cpuguy83/go-md2man/v2 v2.0.7
|
|
## explicit; go 1.12
|
|
github.com/cpuguy83/go-md2man/v2/md2man
|
|
# github.com/cyphar/filepath-securejoin v0.5.0
|
|
## explicit; go 1.18
|
|
github.com/cyphar/filepath-securejoin
|
|
github.com/cyphar/filepath-securejoin/internal/consts
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite/internal
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite/internal/assert
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite/internal/fd
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite/internal/kernelversion
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite/internal/linux
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite/internal/procfs
|
|
github.com/cyphar/filepath-securejoin/pathrs-lite/procfs
|
|
# github.com/docker/go-units v0.5.0
|
|
## explicit
|
|
github.com/docker/go-units
|
|
# github.com/godbus/dbus/v5 v5.1.0
|
|
## explicit; go 1.12
|
|
github.com/godbus/dbus/v5
|
|
# github.com/moby/sys/capability v0.4.0
|
|
## explicit; go 1.21
|
|
github.com/moby/sys/capability
|
|
# github.com/moby/sys/mountinfo v0.7.2
|
|
## explicit; go 1.17
|
|
github.com/moby/sys/mountinfo
|
|
# github.com/moby/sys/user v0.4.0
|
|
## explicit; go 1.17
|
|
github.com/moby/sys/user
|
|
# github.com/moby/sys/userns v0.1.0
|
|
## explicit; go 1.21
|
|
github.com/moby/sys/userns
|
|
# github.com/mrunalp/fileutils v0.5.1
|
|
## explicit; go 1.13
|
|
github.com/mrunalp/fileutils
|
|
# github.com/opencontainers/cgroups v0.0.5
|
|
## explicit; go 1.23.0
|
|
github.com/opencontainers/cgroups
|
|
github.com/opencontainers/cgroups/devices
|
|
github.com/opencontainers/cgroups/devices/config
|
|
github.com/opencontainers/cgroups/fs
|
|
github.com/opencontainers/cgroups/fs2
|
|
github.com/opencontainers/cgroups/fscommon
|
|
github.com/opencontainers/cgroups/internal/path
|
|
github.com/opencontainers/cgroups/manager
|
|
github.com/opencontainers/cgroups/systemd
|
|
# github.com/opencontainers/runtime-spec v1.2.2-0.20250818071321-383cadbf08c0
|
|
## explicit
|
|
github.com/opencontainers/runtime-spec/specs-go
|
|
github.com/opencontainers/runtime-spec/specs-go/features
|
|
# github.com/opencontainers/selinux v1.12.0 => ./internal/third_party/selinux
|
|
## explicit; go 1.19
|
|
github.com/opencontainers/selinux/go-selinux
|
|
github.com/opencontainers/selinux/go-selinux/label
|
|
github.com/opencontainers/selinux/pkg/pwalkdir
|
|
# github.com/russross/blackfriday/v2 v2.1.0
|
|
## explicit
|
|
github.com/russross/blackfriday/v2
|
|
# github.com/seccomp/libseccomp-golang v0.11.1
|
|
## explicit; go 1.19
|
|
github.com/seccomp/libseccomp-golang
|
|
# github.com/sirupsen/logrus v1.9.3
|
|
## explicit; go 1.13
|
|
github.com/sirupsen/logrus
|
|
github.com/sirupsen/logrus/hooks/test
|
|
# github.com/urfave/cli v1.22.17
|
|
## explicit; go 1.11
|
|
github.com/urfave/cli
|
|
# github.com/vishvananda/netlink v1.3.1
|
|
## explicit; go 1.12
|
|
github.com/vishvananda/netlink
|
|
github.com/vishvananda/netlink/nl
|
|
# github.com/vishvananda/netns v0.0.5
|
|
## explicit; go 1.17
|
|
github.com/vishvananda/netns
|
|
# golang.org/x/net v0.46.0
|
|
## explicit; go 1.24.0
|
|
golang.org/x/net/bpf
|
|
# golang.org/x/sys v0.37.0
|
|
## explicit; go 1.24.0
|
|
golang.org/x/sys/unix
|
|
golang.org/x/sys/windows
|
|
# google.golang.org/protobuf v1.36.10
|
|
## explicit; go 1.23
|
|
google.golang.org/protobuf/encoding/prototext
|
|
google.golang.org/protobuf/encoding/protowire
|
|
google.golang.org/protobuf/internal/descfmt
|
|
google.golang.org/protobuf/internal/descopts
|
|
google.golang.org/protobuf/internal/detrand
|
|
google.golang.org/protobuf/internal/editiondefaults
|
|
google.golang.org/protobuf/internal/encoding/defval
|
|
google.golang.org/protobuf/internal/encoding/messageset
|
|
google.golang.org/protobuf/internal/encoding/tag
|
|
google.golang.org/protobuf/internal/encoding/text
|
|
google.golang.org/protobuf/internal/errors
|
|
google.golang.org/protobuf/internal/filedesc
|
|
google.golang.org/protobuf/internal/filetype
|
|
google.golang.org/protobuf/internal/flags
|
|
google.golang.org/protobuf/internal/genid
|
|
google.golang.org/protobuf/internal/impl
|
|
google.golang.org/protobuf/internal/order
|
|
google.golang.org/protobuf/internal/pragma
|
|
google.golang.org/protobuf/internal/protolazy
|
|
google.golang.org/protobuf/internal/set
|
|
google.golang.org/protobuf/internal/strs
|
|
google.golang.org/protobuf/internal/version
|
|
google.golang.org/protobuf/proto
|
|
google.golang.org/protobuf/reflect/protoreflect
|
|
google.golang.org/protobuf/reflect/protoregistry
|
|
google.golang.org/protobuf/runtime/protoiface
|
|
google.golang.org/protobuf/runtime/protoimpl
|
|
# github.com/opencontainers/selinux => ./internal/third_party/selinux
|