Skip to content

[24.0 backport] vendor: github.com/docker/distribution v2.8.2 - #4286

Merged
thaJeztah merged 1 commit into
docker:24.0from
thaJeztah:24.0_backport_vendor_distribution_v2.8.2
May 11, 2023
Merged

[24.0 backport] vendor: github.com/docker/distribution v2.8.2#4286
thaJeztah merged 1 commit into
docker:24.0from
thaJeztah:24.0_backport_vendor_distribution_v2.8.2

Conversation

@thaJeztah

Copy link
Copy Markdown
Member

CI

  • Dockerfile: fix filenames of artifacts

Bugfixes

  • Fix panic in inmemory driver
  • Add code to handle pagination of parts. Fixes max layer size of 10GB bug
  • Parse http forbidden as denied
  • Revert "registry/client: set Accept: identity header when getting layers

Runtime

  • Update to go1.19.9
  • Dockerfile: update xx to v1.2.1 (#3907)

Security

full diff: distribution/distribution@v2.8.1...v2.8.2-beta.2

(cherry picked from commit 353e0a9)

- What I did

- How I did it

- How to verify it

- Description for the changelog

- A picture of a cute animal (not mandatory but encouraged)

CI
- Dockerfile: fix filenames of artifacts
Bugfixes
- Fix panic in inmemory driver
- Add code to handle pagination of parts. Fixes max layer size of 10GB bug
- Parse http forbidden as denied
- Revert "registry/client: set Accept: identity header when getting layers
Runtime
- Update to go1.19.9
- Dockerfile: update xx to v1.2.1 ([docker#3907](distribution/distribution#3907))
Security
- Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16
- Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/_catalog [`521ea3d9`](distribution/distribution@521ea3d)
full diff: distribution/distribution@v2.8.1...v2.8.2-beta.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 353e0a9)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@thaJeztah
thaJeztah merged commit 1d7dd91 into docker:24.0May 11, 2023
@thaJeztah
thaJeztah deleted the 24.0_backport_vendor_distribution_v2.8.2 branch May 11, 2023 17:50
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@thaJeztah@vvoland