public/k3s
1
0
Fork 0
mirror of https://git.vectorsigma.ru/public/k3s.git synced 2026-08-03 19:19:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
8311feb0b439fc5749c4e89f01736b9017bfeadb
k3s/pkg
History
Brad Davidson 8311feb0b4 Consistently use constant-time comparison of password hashes 
As per https://github.com/golang/go/issues/47001 even subtle.ConstantTimeCompare should never be used with variable-length inputs, as it will return 0 if the lengths do not match. Switch to consistently using constant-time comparisons of hashes for password checks to avoid any possible side-channel leaks that could be combined with other vectors to discover password lengths.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 239021e759)
2023-05-10 15:02:29 -07:00
..
agent
Bump cni plugins to v1.2.0-k3s1
2023-05-10 15:02:29 -07:00
apis/k3s.cattle.io
Create CRDs with schema
2023-05-10 15:02:29 -07:00
authenticator
Consistently use constant-time comparison of password hashes
2023-05-10 15:02:29 -07:00
bootstrap
[Release-1.24] Replace deprecated ioutil package (#6235)
2022-10-07 19:03:46 -07:00
cgroups
[Release-1.24] Replace deprecated ioutil package (#6235)
2022-10-07 19:03:46 -07:00
cli
Improve egress selector handling on agentless servers
2023-05-10 15:02:29 -07:00
clientaccess
Fail to validate server tokens that use bootstrap id/secret format
2023-05-10 15:02:29 -07:00
cloudprovider
[release-1.24] Update klipper lb and helm-controller (#7241)
2023-04-06 22:43:30 +02:00
cluster
Fail to validate server tokens that use bootstrap id/secret format
2023-05-10 15:02:29 -07:00
codegen
[master] changing package to k3s-io (#4846)
2022-03-02 15:47:27 -08:00
configfilearg
[Release-1.24] CLI + Config Enhancement (#7407)
2023-05-02 15:09:08 -07:00
containerd
Bump golang to 1.18.1
2022-05-11 14:39:07 -07:00
crd
Create CRDs with schema
2023-05-10 15:02:29 -07:00
ctr
Build & enable ctr with k3s server
2019-06-30 09:30:25 -07:00
daemons
Fix stack log on panic
2023-05-10 15:02:29 -07:00
data
code changes to drop the vendor dir
2021-12-21 14:23:38 -07:00
datadir
[master] changing package to k3s-io (#4846)
2022-03-02 15:47:27 -08:00
dataverify
Add file verification for data directory
2020-10-06 10:29:27 -07:00
deploy
go generate
2023-05-10 15:02:29 -07:00
etcd
Fix MemberList error handling and incorrect etcd-arg passthrough
2023-05-10 15:02:29 -07:00
flock
Update golangci-lint to 1.45.2
2022-04-13 14:48:42 -07:00
generated
Create CRDs with schema
2023-05-10 15:02:29 -07:00
kubeadm
Add support for k3s token command
2023-02-10 09:34:10 -08:00
kubectl
Track upstream changes to kubectl command execution
2022-03-16 17:19:18 -07:00
node
[master] changing package to k3s-io (#4846)
2022-03-02 15:47:27 -08:00
nodeconfig
Fix access to hostNetwork port on NodeIP when egress-selector-mode=agent
2023-02-10 09:43:58 -08:00
nodepassword
Consistently use constant-time comparison of password hashes
2023-05-10 15:02:29 -07:00
passwd
Consistently use constant-time comparison of password hashes
2023-05-10 15:02:29 -07:00
rootless
Address nits from self-review
2022-12-02 00:20:37 -08:00
rootlessports
[master] changing package to k3s-io (#4846)
2022-03-02 15:47:27 -08:00
secretsencrypt
Ignore value conflicts when reencrypting secrets (#6918)
2023-02-08 10:45:13 -08:00
server
Consistently use constant-time comparison of password hashes
2023-05-10 15:02:29 -07:00
static
go generate
2023-05-10 15:02:29 -07:00
token
[Release-1.24] Replace deprecated ioutil package (#6235)
2022-10-07 19:03:46 -07:00
untar
Bump wharfie to v0.5.1 and use shared decompression code
2021-12-07 12:50:57 -08:00
util
Migrate netutil methods into /utils/net.go
2023-05-05 09:08:45 +02:00
version
remove hard coded value
2020-07-09 11:20:06 -07:00