erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-08-07 09:25:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
spiegel_podman/vendor/github.com
History
Paul Holzinger e88d8dbeae
fix rootless port forwarding with network dis-/connect 
The rootlessport forwarder requires a child IP to be set. This must be a
valid ip in the container network namespace. The problem is that after a
network disconnect and connect the eth0 ip changed. Therefore the
packages are dropped since the source ip does no longer exists in the
netns.
One solution is to set the child IP to 127.0.0.1, however this is a
security problem. [1]

To fix this we have to recreate the ports after network connect and
disconnect. To make this work the rootlessport process exposes a socket
where podman network connect/disconnect connect to and send to new child
IP to rootlessport. The rootlessport process will remove all ports and
recreate them with the new correct child IP.

Also bump rootlesskit to v0.14.3 to fix a race with RemovePort().

Fixes #10052

[1] https://nvd.nist.gov/vuln/detail/CVE-2021-20199

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2021-08-03 16:29:09 +02:00
..
acarl005/stripansi vendor github.com/containers/image/v5@v5.2.0 2020-02-05 09:55:50 +01:00
Azure/go-ansiterm vendor: update everything 2019-01-11 13:38:11 +01:00
beorn7/perks update dependencies 2019-06-24 21:29:31 +02:00
bits-and-blooms/bitset Bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2 2021-06-03 09:34:20 +00:00
blang/semver V2 API Version Support 2020-05-20 10:21:30 -07:00
buger/goterm vendor: update everything 2019-01-11 13:38:11 +01:00
BurntSushi/toml migrate to go-modules 2019-06-24 13:20:59 +02:00
cespare/xxhash/v2 Bump github.com/containers/storage from 1.25.0 to 1.28.0 2021-03-18 20:27:25 +01:00
checkpoint-restore Vendor in go-criu v5.1.0 for Pod checkpoint/restore support 2021-07-27 16:10:44 +02:00
chzyer/readline short-name aliasing 2020-11-13 15:40:06 +01:00
container-orchestrated-devices/container-device-interface Add support for CDI device configuration 2021-04-20 09:18:52 -04:00
containerd update c/common 2021-05-20 10:21:27 +02:00
containernetworking Bump github.com/containernetworking/cni from 0.8.0 to 0.8.1 2021-02-03 09:08:19 -05:00
containers Bump github.com/containers/storage from 1.33.0 to 1.33.1 2021-08-02 12:20:13 +00:00
coreos Bump github.com/coreos/go-systemd/v22 from 22.3.1 to 22.3.2 2021-05-11 06:19:04 +00:00
cri-o/ocicni Do not use inotify for OCICNI 2021-06-22 16:00:47 +02:00
cyphar/filepath-securejoin Bump github.com/cyphar/filepath-securejoin from 0.2.2 to 0.2.3 2021-07-05 12:20:31 +00:00
davecgh/go-spew migrate to go-modules 2019-06-24 13:20:59 +02:00
digitalocean introduce podman machine 2021-03-25 08:43:51 -05:00
disiqueira/gotree/v3 migrate Podman to containers/common/libimage 2021-05-05 11:30:12 +02:00
docker Vendor in containers/common v0.40.0 2021-06-17 14:59:42 -04:00
dtylman/scp Created scp.go image_scp_test.go and podman-image-scp.1.md 2021-07-30 17:19:24 -04:00
fsnotify/fsnotify Bump github.com/fsnotify/fsnotify from 1.4.7 to 1.4.9 2020-03-13 09:31:40 -04:00
fsouza/go-dockerclient Bump github.com/containers/storage from 1.32.3 to 1.32.5 2021-06-29 15:58:32 -04:00
ghodss/yaml migrate to go-modules 2019-06-24 13:20:59 +02:00
go-logr/logr Bump k8s.io/api from 0.20.5 to 0.21.0 2021-04-09 08:04:51 +00:00
go-task/slim-sprig Bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0 2021-04-05 09:37:20 +00:00
godbus/dbus/v5 Bump github.com/coreos/go-systemd/v22 from 22.3.0 to 22.3.1 2021-04-02 07:58:47 +00:00
gogo/protobuf Bump github.com/containers/storage from 1.25.0 to 1.28.0 2021-03-18 20:27:25 +01:00
golang Bump github.com/onsi/gomega from 1.11.0 to 1.12.0 2021-05-06 08:07:07 +00:00
google Bump github.com/google/uuid from 1.2.0 to 1.3.0 2021-07-13 12:22:13 +00:00
gorilla Bump github.com/gorilla/mux from 1.7.4 to 1.8.0 2020-09-02 06:46:20 -04:00
hashicorp Bump github.com/containers/storage from 1.25.0 to 1.28.0 2021-03-18 20:27:25 +01:00
hpcloud/tail migrate to go-modules 2019-06-24 13:20:59 +02:00
imdario/mergo Vendor in containers/common v0.40.0 2021-06-17 14:59:42 -04:00
inconshreveable/mousetrap Migrate to cobra CLI 2019-02-08 10:26:43 -06:00
ishidawataru/sctp migrate Podman to containers/common/libimage 2021-05-05 11:30:12 +02:00
jinzhu/copier Vendor in containers/common v0.40.0 2021-06-17 14:59:42 -04:00
json-iterator/go Bump github.com/json-iterator/go from 1.1.10 to 1.1.11 2021-04-28 08:09:20 +00:00
juju/ansiterm short-name aliasing 2020-11-13 15:40:06 +01:00
klauspost Vendor in containers/common v0.40.0 2021-06-17 14:59:42 -04:00
lunixbochs/vtclean short-name aliasing 2020-11-13 15:40:06 +01:00
manifoldco/promptui short-name aliasing 2020-11-13 15:40:06 +01:00
mattn Vendor in containers/common v0.40.0 2021-06-17 14:59:42 -04:00
matttproud/golang_protobuf_extensions update dependencies 2019-06-24 21:29:31 +02:00
Microsoft Bump github.com/containers/storage from 1.32.5 to 1.32.6 2021-07-12 12:20:58 +00:00
miekg/pkcs11 Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0 2021-02-09 10:49:43 -05:00
mistifyio/go-zfs Bump github.com/containers/storage from 1.25.0 to 1.28.0 2021-03-18 20:27:25 +01:00
mitchellh/mapstructure vendor containers/common@main 2021-07-02 11:38:28 +02:00
moby [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 2021-03-26 13:57:27 -04:00
modern-go migrate to go-modules 2019-06-24 13:20:59 +02:00
morikuni/aec bump containers/image to v5.0.0, buildah to v1.11.4 2019-10-29 13:35:18 -04:00
mrunalp/fileutils Bump github.com/containers/storage from 1.25.0 to 1.28.0 2021-03-18 20:27:25 +01:00
mtrmac/gpgme vendor github.com/mtrmac/gpgme@v0.1.2 2020-02-05 09:56:25 +01:00
nxadm/tail Bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1 2021-03-08 06:10:15 -05:00
onsi Bump github.com/onsi/gomega from 1.13.0 to 1.14.0 2021-07-08 12:23:01 +00:00
opencontainers Bump github.com/opencontainers/runc from 1.0.0 to 1.0.1 2021-07-19 12:19:29 +00:00
openshift/imagebuilder migrate Podman to containers/common/libimage 2021-05-05 11:30:12 +02:00
ostreedev/ostree-go github.com/containers/storage v1.12.13 2019-08-01 03:46:14 -04:00
pkg/errors build(deps): bump github.com/containers/storage from 1.15.5 to 1.15.7 2020-01-23 03:49:20 -05:00
pmezard/go-difflib migrate to go-modules 2019-06-24 13:20:59 +02:00
prometheus [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 2021-03-26 13:57:27 -04:00
rivo/uniseg Switch all builds to pull-never 2021-03-16 06:19:58 -04:00
rootless-containers/rootlesskit fix rootless port forwarding with network dis-/connect 2021-08-03 16:29:09 +02:00
safchain/ethtool podman network create 2019-09-09 09:32:43 -05:00
seccomp/libseccomp-golang Vendor in containers/buildah 1.16.1 2020-09-11 13:37:37 -04:00
sirupsen/logrus Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 2021-03-12 06:15:31 -05:00
spf13 Bump github.com/spf13/cobra to v1.2.1 2021-07-02 17:36:30 +02:00
stefanberger/go-pkcs11uri Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0 2021-02-09 10:49:43 -05:00
stretchr/testify Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 2021-01-14 04:22:05 -05:00
syndtr/gocapability vendor: drop replace for github.com/syndtr/gocapability 2021-03-19 15:17:12 +01:00
tchap/go-patricia update dependencies 2019-06-24 21:29:31 +02:00
uber/jaeger-client-go Bump github.com/uber/jaeger-client-go 2021-05-31 12:55:49 +00:00
ulikunitz/xz Bump github.com/containers/storage from 1.28.0 to 1.28.1 2021-03-25 07:05:38 +00:00
vbatts/tar-split migrate to go-modules 2019-06-24 13:20:59 +02:00
vbauerster/mpb Bump github.com/containers/image/v5 from 5.13.2 to 5.14.0 2021-07-25 04:54:29 -04:00
vishvananda Bump github.com/containernetworking/plugins from 0.8.7 to 0.9.0 2020-12-10 05:15:22 -05:00
VividCortex/ewma Bump github.com/vbauerster/mpb/v6 from 6.0.3 to 6.0.4 2021-05-19 06:50:18 +00:00
xeipuuv vendor c/image v5.4.2 2020-04-07 12:09:48 +02:00