Skip to content

[v0.21] cherry-picks for v0.21.3#3067

Merged
crazy-max merged 2 commits intodocker:v0.21from
crazy-max:0.21_picks_0.21.3
Mar 17, 2025
Merged

[v0.21] cherry-picks for v0.21.3#3067
crazy-max merged 2 commits intodocker:v0.21from
crazy-max:0.21_picks_0.21.3

Conversation

@crazy-max
Copy link
Copy Markdown
Member

Picks for CVE-2025-0495

tonistiigi and others added 2 commits March 17, 2025 16:57
User might pass a value that they don't expect to
be kept in trace storage. For example some cache backends
allow passing authentication tokens with a flag.

Instead use known primary config values as attributes
of the root span.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
@crazy-max crazy-max marked this pull request as ready for review March 17, 2025 16:08
@crazy-max crazy-max merged commit 7b5fecb into docker:v0.21 Mar 17, 2025
127 checks passed
@crazy-max crazy-max deleted the 0.21_picks_0.21.3 branch March 17, 2025 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants