GitHub / tianon/gosu issues and pull requests
#158 - CI: Add build artifacts to release
Pull Request -
State: open - Opened by orgads 3 months ago
#157 - Provide a VEX document
Issue -
State: open - Opened by icekom 3 months ago
- 6 comments
#156 - add dependabot.yml, create updatable
Pull Request -
State: closed - Opened by nathanlaceyraft 5 months ago
#155 - Add `fake-git.sh` script to embed version information
Pull Request -
State: open - Opened by tianon 6 months ago
- 1 comment
#154 - Upgrade Go version 1.23.4 and pkg github.com/moby/sys/user, golang.org/x/sys
Pull Request -
State: open - Opened by vkamlesh 7 months ago
- 4 comments
#153 - Vulnerability found in non-os package type (go) - /usr/local/bin/gosu (fixed in: 1.21.9, 1.22.2)(CVE-2023-45288 - https://nvd.nist.gov/vuln/detail/CVE-2023-45288)
Issue -
State: closed - Opened by avikumar11 7 months ago
- 1 comment
#152 - Create a new tag
Issue -
State: open - Opened by dogruis 8 months ago
- 1 comment
#151 - Should use 1.23-bookworm to get rid of cves
Issue -
State: closed - Opened by dogruis 8 months ago
- 2 comments
#150 - The v17 has many security vulnerables because of Go stdlib
Issue -
State: closed - Opened by OlgasAcc 9 months ago
- 1 comment
#149 - Update gosu binaries and dependencies to eliminate vulnerabilities
Pull Request -
State: closed - Opened by shusaan 9 months ago
- 5 comments
#148 - CVE-2023-29403 discovered in gosu
Issue -
State: closed - Opened by abudan-wb about 1 year ago
- 1 comment
#147 - Update broken dockerfile.test link
Pull Request -
State: closed - Opened by LukeParky about 1 year ago
- 1 comment
#146 - Running gosu in docker-entrypoint.sh on UBI 8 just returns "Success" but doesn't continue.
Issue -
State: closed - Opened by paisley about 1 year ago
- 2 comments
#145 - Fix govulncheck wrapper + run govulncheck on latest release periodically too
Pull Request -
State: closed - Opened by tianon about 1 year ago
#144 - govulncheck-with-excludes reporting lots of results, including archive/zip
Issue -
State: closed - Opened by tianon about 1 year ago
- 15 comments
#143 - Add official `setpriv-wrapper.sh` which implements `gosu` in pure POSIX shell via `setpriv`
Pull Request -
State: open - Opened by tianon about 1 year ago
- 3 comments
#142 - Add an "RPM-based" section back to `INSTALL.md`
Pull Request -
State: closed - Opened by tianon about 1 year ago
#141 - CVE-2023-24538 and CVE-2023-24540 reported in stdlib as reported by Trivy security scanner
Issue -
State: closed - Opened by tgagor about 1 year ago
- 2 comments
#140 - Update to Go 1.20.5
Pull Request -
State: closed - Opened by tianon over 1 year ago
- 5 comments
#139 - Ditch `fmt`, `log`, `path/filepath`, and `strings` for ~17KB more savings
Pull Request -
State: closed - Opened by tianon over 1 year ago
- 1 comment
#138 - Remove use of text/template
Pull Request -
State: closed - Opened by AlexanderYastrebov over 1 year ago
- 2 comments
#137 - Add `-trimpath` to builds for cleaner embedded paths
Pull Request -
State: closed - Opened by tianon over 1 year ago
- 2 comments
#136 - Build gosu with a supported version of GO
Issue -
State: open - Opened by jhawkins1 over 1 year ago
- 39 comments
#135 - Build gosu for MacOS (and provide binaries for Apple Silicon processors [darwin/arm64] arch)
Issue -
State: closed - Opened by smktpd over 1 year ago
- 8 comments
#134 - setup-user: use github.com/moby/sys/user
Pull Request -
State: closed - Opened by neersighted almost 2 years ago
- 3 comments
#133 - gosu issue with the 'setuid' bit set
Issue -
State: closed - Opened by majid-akbari almost 2 years ago
- 5 comments
#132 - gosu failed switching to "postgres" if it is already switched to postgres
Issue -
State: closed - Opened by EugenKon almost 2 years ago
- 1 comment
#131 - fix: update runc dependency 5 patch versions to remediate vulnerabilities
Pull Request -
State: closed - Opened by ghost almost 2 years ago
- 9 comments
#130 - gosu binary Vuln with thirdparty github.com/opencontainers/runc (CVE-2023-27561)
Issue -
State: closed - Opened by eshafaq1 almost 2 years ago
- 12 comments
#129 - Add new "govulncheck-with-excludes.sh" wrapper script
Pull Request -
State: closed - Opened by tianon about 2 years ago
#128 - Vulnerabilities in gosu
Issue -
State: closed - Opened by anksvault about 2 years ago
- 6 comments
#127 - Debian Stable gosu version is still 1.14-1
Issue -
State: closed - Opened by abraunegg about 2 years ago
- 3 comments
#126 - Update govulncheck to the explicit new v0.1.0 release
Pull Request -
State: closed - Opened by tianon about 2 years ago
- 1 comment
#125 - 1.14 -> 1.16 bump has gosu stalling
Issue -
State: closed - Opened by grooverdan about 2 years ago
- 6 comments
#124 - Runc version update timeline
Issue -
State: closed - Opened by vsur06 over 2 years ago
- 1 comment
#123 - Update golang to 1.19.5/1.20
Issue -
State: closed - Opened by f-ld over 2 years ago
- 2 comments
#122 - update runc version 1.1.2
Pull Request -
State: closed - Opened by pgvishnuram over 2 years ago
- 2 comments
#121 - Use QEMU and "arch-test" to avoid bad binaries in the future
Pull Request -
State: closed - Opened by tianon over 2 years ago
- 4 comments
#120 - Add SECURITY.md that points to `govulncheck`
Pull Request -
State: closed - Opened by tianon over 2 years ago
#119 - creating a release built on Update to Go 1.19, Alpine 3.16, runc 1.1.4
Issue -
State: closed - Opened by deepankumaresan over 2 years ago
- 1 comment
#118 - Can we release a new gosu tag with go version 1.19
Issue -
State: closed - Opened by irajdeep over 2 years ago
- 1 comment
#117 - Upgrade runc version from v1.0.1 to v1.1.4 to resolve CVE-2022-29162
Issue -
State: closed - Opened by iyuhptop almost 3 years ago
- 4 comments
#116 - Bump go version in new release
Issue -
State: closed - Opened by Daemonslayer2048 almost 3 years ago
- 4 comments
#115 - Update to runc 1.1.2 can release new tag?
Issue -
State: closed - Opened by zhaohao-1004 almost 3 years ago
- 1 comment
#114 - Question/Conceptual: combining gosu and supervisorctl
Issue -
State: closed - Opened by EugenMayer almost 3 years ago
- 2 comments
#113 - Go critical vulnerability
Issue -
State: closed - Opened by kwebb-bis almost 3 years ago
- 1 comment
#112 - New CVEs Pertaining to Go Version
Issue -
State: closed - Opened by jtk94 almost 3 years ago
- 1 comment
#111 - Potential vulnerabilities because of old version of go
Issue -
State: closed - Opened by slakwa almost 3 years ago
- 1 comment
#110 - Update to runc 1.1.2
Pull Request -
State: closed - Opened by tianon about 3 years ago
#109 - Upgrade runc to latest.
Issue -
State: closed - Opened by coltonfreeman26 about 3 years ago
- 7 comments
#108 - New CVEs need to be applied for Gosu: CVE-2022-24675, CVE-2022-27191, CVE-2022-28327
Issue -
State: closed - Opened by marcosbc about 3 years ago
- 1 comment
#107 - New CVEs need to apply to gosu
Issue -
State: closed - Opened by HeryGitH about 3 years ago
- 2 comments
#106 - Publish new release based on 1.17 changes in main branch
Issue -
State: closed - Opened by slimm609 over 3 years ago
- 1 comment
#105 - 同学,您这个项目引入了40个开源组件,存在1个漏洞,辛苦升级一下
Issue -
State: closed - Opened by ghost over 3 years ago
- 2 comments
#104 - CVEs that do not apply to gosu
Issue -
State: closed - Opened by tianon over 3 years ago
- 29 comments
#103 - CVE-2022-23772 security vulnerability in Go 1.16.x and 1.17.x
Issue -
State: closed - Opened by otramony over 3 years ago
- 1 comment
#102 - update Alpine and Golang
Pull Request -
State: closed - Opened by PascalBourdier over 3 years ago
- 6 comments
#101 - Update golang to 3.15
Pull Request -
State: closed - Opened by slakwa over 3 years ago
- 3 comments
#100 - New release to include runc v1.0.3
Issue -
State: closed - Opened by anouarchattouna over 3 years ago
- 3 comments
#99 - CVE-2021-38297 Security with 1.16.7 of go
Issue -
State: closed - Opened by sellersna over 3 years ago
- 1 comment
#98 - Vulnerabilities reported against golang 1.16.7
Issue -
State: closed - Opened by jbennettjr over 3 years ago
- 1 comment
#97 - New release to pick up Golang 1.16.12
Issue -
State: closed - Opened by daveneeley over 3 years ago
- 2 comments
#96 - Update build deps, esp. runc to v1.0.3
Pull Request -
State: closed - Opened by tianon over 3 years ago
#95 - setuid: Operation not permitted
Issue -
State: closed - Opened by gimler over 3 years ago
- 7 comments
#94 - [Security] Update Gosu binaries to use the latest Golang versions
Issue -
State: closed - Opened by jotamartos over 3 years ago
- 3 comments
#93 - failed to create new OS thread (have 2 already; errno=22)
Issue -
State: closed - Opened by ciaranmcnulty almost 4 years ago
- 7 comments
#92 - Provide binaries compatible with `$(uname -m)`
Issue -
State: closed - Opened by fauust almost 4 years ago
- 3 comments
#91 - CVE-2021-29923: go 1.16.7 needs to upgrade to go 1.17.x
Issue -
State: closed - Opened by quickwind almost 4 years ago
- 5 comments
#90 - Update to Alpine 3.14 and Debian Bullseye
Pull Request -
State: closed - Opened by tianon almost 4 years ago
#89 - Disallow installing gosu with setuid
Pull Request -
State: closed - Opened by tianon almost 4 years ago
- 1 comment
#88 - Missing LD_LIBRARY_PATH variable problem
Issue -
State: closed - Opened by xfoobar almost 4 years ago
- 7 comments
#87 - GPG Keyserver Error
Issue -
State: closed - Opened by sigonzal3 about 4 years ago
- 3 comments
#86 - Why would a process not be associated with a port when using gosu?
Issue -
State: closed - Opened by rorytorneymf about 4 years ago
- 1 comment
#85 - GOSU fails to switch when provided user_id is larger than 65536?!!
Issue -
State: closed - Opened by Samahu about 4 years ago
- 8 comments
#84 - gosu in entrypoint.sh
Issue -
State: closed - Opened by jwillmer about 4 years ago
- 2 comments
#83 - Relicense
Issue -
State: closed - Opened by tianon over 4 years ago
- 12 comments
#82 - Global enhancements
Pull Request -
State: closed - Opened by crazy-max over 4 years ago
- 6 comments
#81 - Question: Perform root step down in derived container after ENTRYPOINT cmd in base container has run?
Issue -
State: closed - Opened by rorytorneymf over 4 years ago
- 1 comment
#79 - [question] restore bash / remove gosu from centos 7
Issue -
State: closed - Opened by agusgambina over 4 years ago
- 1 comment
#78 - Hangs with exec "$@"
Issue -
State: closed - Opened by markfaine almost 5 years ago
- 5 comments
#77 - fix small warn in shell scripts
Pull Request -
State: closed - Opened by PascalBourdier almost 5 years ago
- 1 comment
#76 - fix CWE-703
Pull Request -
State: closed - Opened by PascalBourdier almost 5 years ago
#75 - [Question] error: exec: "source": executable file not found in $PATH
Issue -
State: closed - Opened by manszigher about 5 years ago
- 3 comments
#74 - remove useless flag
Pull Request -
State: closed - Opened by fahedouch about 5 years ago
- 4 comments
#73 - darwin-amd64 gosu binary
Issue -
State: closed - Opened by fahedouch about 5 years ago
- 4 comments
#72 - Add Debian-based copy of the test suite
Pull Request -
State: closed - Opened by tianon over 5 years ago
- 1 comment
#71 - gosu mips64el
Issue -
State: closed - Opened by wcsno1 over 5 years ago
- 1 comment
#70 - Add upx to Docker build to compress compat bins
Pull Request -
State: closed - Opened by abtreece over 5 years ago
- 2 comments
#69 - Add build support for mips64le
Pull Request -
State: closed - Opened by ydcool over 5 years ago
- 7 comments
#68 - Difference to runuser?
Issue -
State: closed - Opened by graste over 5 years ago
- 2 comments
#67 - Update base image and runc
Pull Request -
State: closed - Opened by chenrui333 over 5 years ago
- 1 comment
#66 - HTTP fetch error 60: Peer certificate cannot be authenticated with known CA certificates
Issue -
State: closed - Opened by hp685 almost 6 years ago
- 9 comments
#65 - sks-keyservers.net down
Issue -
State: closed - Opened by warezWally almost 6 years ago
- 1 comment
#64 - user switching failing with user namespace mapping
Issue -
State: closed - Opened by thdesy almost 6 years ago
- 8 comments
#63 - I am having some issue with gosu
Issue -
State: closed - Opened by quanghnn almost 6 years ago
- 5 comments
#62 - Forking process with gosu hangs
Issue -
State: closed - Opened by fideloper about 6 years ago
- 2 comments
#61 - what does 'gosu nobody true' mean?
Issue -
State: closed - Opened by pyfreyr over 6 years ago
- 1 comment
#60 - Add a couple error case tests too
Pull Request -
State: closed - Opened by tianon over 6 years ago
#59 - isn't this the same thing as setpriv?
Issue -
State: closed - Opened by Hello71 over 6 years ago
- 1 comment
#58 - Unable to mount userid using gosu on Centos
Issue -
State: closed - Opened by poojatr over 6 years ago
- 1 comment