Package: docker-registry / 2.7.1+ds2-7+deb11u1

Metadata

Package Version Patches format
docker-registry 2.7.1+ds2-7+deb11u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
config allow delete.patch | (download)

cmd/registry/config-example.yml | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 allow delete by default.


config docker registry.patch | (download)

cmd/registry/config-dev.yml | 2 1 + 1 - 0 !
cmd/registry/config-example.yml | 4 2 + 2 - 0 !
2 files changed, 3 insertions(+), 3 deletions(-)

 patch the default "rootdirectory" for policy compliance
lib crypto.patch | (download)

registry/registry.go | 32 14 + 18 - 0 !
1 file changed, 14 insertions(+), 18 deletions(-)

 replace rsc.io/letsencrypt in favour of golang.org/x/crypto

Signed-off-by: Tariq Ibrahim <tariq181290@gmail.com>
no azure.patch | (download)

cmd/registry/main.go | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

 removed azure support


no relic.patch | (download)

registry/registry.go | 12 1 + 11 - 0 !
1 file changed, 1 insertion(+), 11 deletions(-)

 temporarily remove newrelic support to cut down on dependencies for initial release
test.patch | (download)

configuration/configuration_test.go | 12 6 + 6 - 0 !
1 file changed, 6 insertions(+), 6 deletions(-)

---
CVE 2023 2253.patch | (download)

configuration/configuration.go | 18 17 + 1 - 0 !
configuration/configuration_test.go | 4 4 + 0 - 0 !
registry/api/v2/descriptors.go | 17 17 + 0 - 0 !
registry/api/v2/errors.go | 9 9 + 0 - 0 !
registry/handlers/api_test.go | 316 288 + 28 - 0 !
registry/handlers/catalog.go | 54 41 + 13 - 0 !
6 files changed, 376 insertions(+), 42 deletions(-)

 fix runaway allocation on /v2/_catalog
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Introduced a Catalog entry in the configuration struct. With it,
it's possible to control the maximum amount of entries returned
by /v2/catalog (`GetCatalog` in registry/handlers/catalog.go).

It's set to a default value of 1000.

`GetCatalog` returns 100 entries by default if no `n` is
provided. When provided it will be validated to be between `0`
and `MaxEntries` defined in Configuration. When `n` is outside
the aforementioned boundary, ErrorCodePaginationNumberInvalid is
returned.

`GetCatalog` now handles `n=0` gracefully with an empty response
as well.

Signed-off-by: Jos D. Gmez R. <1josegomezr@gmail.com>
Co-authored-by: Cory Snider <corhere@gmail.com>