Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

vendor: update some dependencies #639

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Commits on Jan 16, 2024

  1. vendor: github.com/sirupsen/logrus v1.9.3

    - Fix a potential denial of service vulnerability in logrus.Writer() that could
      be triggered by logging text longer than 64kb without newline.
    - Fix panic in Writer
    
    full diff: sirupsen/logrus@v1.9.0...v1.9.3
    
    Signed-off-by: Sebastiaan van Stijn <[email protected]>
    thaJeztah committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    4a251be View commit details
    Browse the repository at this point in the history
  2. vendor: golang.org/x/crypto v0.17.0

    update to address [GO-2023-2402] / [CVE-2023-48795]
    
    full diff: golang/crypto@v0.9.0...v0.17.0
    
    [GO-2023-2402]: https://pkg.go.dev/vuln/GO-2023-2402
    [CVE-2023-48795]: https://www.cve.org/CVERecord?id=CVE-2023-48795
    
    Signed-off-by: Sebastiaan van Stijn <[email protected]>
    thaJeztah committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    5a0bc85 View commit details
    Browse the repository at this point in the history
  3. vendor: golang.org/x/net v0.17.0

    update to address [GO-2023-2102] / [CVE-2023-39325]
    
    [GO-2023-2102]: https://pkg.go.dev/vuln/GO-2023-2102
    [CVE-2023-39325]: https://www.cve.org/CVERecord?id=CVE-2023-39325
    
    Signed-off-by: Sebastiaan van Stijn <[email protected]>
    thaJeztah committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    bb270e6 View commit details
    Browse the repository at this point in the history