Skip to content
This repository has been archived by the owner on Mar 26, 2020. It is now read-only.

Commit

Permalink
Update golang.org/x/net dependency
Browse files Browse the repository at this point in the history 
The vendored golang.org/x/net has been updated to
146acd28ed5894421fb5aac80ca93bc1b1f46f87 which contains
cf3bd585ca2a5a21b057abd8be7eea2204af89d0 a fix for CVE-2018-17142.

CVE-2018-17142 does not affect GD2 in any way. Neither GD2 nor any of
its dependencies call html.Parse(), which had the CVE. The dependency is
being update to ensure that the vendored source tarball that is
generated doesn't have the source with the CVE.
  • Loading branch information
@kshlm
kshlm committed Oct 11, 2018
1 parent 753efb0 commit 03e7bc2
Showing 1 changed file with 160 additions and 16 deletions.
Loading

0 comments on commit 03e7bc2

Please sign in to comment.