Skip to content
This repository was archived by the owner on Oct 13, 2023. It is now read-only.

Commit 5974a91

Browse files
committed
vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 (CVE-2020-7919)
Includes golang/crypto@69ecbb4 (forward-port of golang/crypto@8b5121b), which fixes CVE-2020-7919: - Panic in crypto/x509 certificate parsing and golang.org/x/crypto/cryptobyte On 32-bit architectures, a malformed input to crypto/x509 or the ASN.1 parsing functions of golang.org/x/crypto/cryptobyte can lead to a panic. The malformed certificate can be delivered via a crypto/tls connection to a client, or to a server that accepts client certificates. net/http clients can be made to crash by an HTTPS server, while net/http servers that accept client certificates will recover the panic and are unaffected. Thanks to Project Wycheproof for providing the test cases that led to the discovery of this issue. The issue is CVE-2020-7919 and Go issue golang.org/issue/36837. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 27d9aa2d9f78b86644cb977bb26c63dcd0ae7eb7) Signed-off-by: Sebastiaan van Stijn <github@gone.nl> Upstream-commit: 3179a3b1e532fd0110637749f67c8a71c2c012ae Component: cli
1 parent d3739cb commit 5974a91

54 files changed

Lines changed: 3992 additions & 2467 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

components/cli/vendor.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,7 @@ github.com/tonistiigi/units 6950e57a87eaf136bbe44ef2ec8e
7979
github.com/xeipuuv/gojsonpointer 4e3ac2762d5f479393488629ee9370b50873b3a6
8080
github.com/xeipuuv/gojsonreference bd5ef7bd5415a7ac448318e64f11a24cd21e594b
8181
github.com/xeipuuv/gojsonschema 93e72a773fade158921402d6a24c819b48aba29d
82-
golang.org/x/crypto 88737f569e3a9c7ab309cdc09a07fe7fc87233c3
82+
golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1
8383
golang.org/x/net eb5bcb51f2a31c7d5141d810b70815c05d9c9146
8484
golang.org/x/oauth2 ef147856a6ddbb60760db74283d2424e98c87bff
8585
golang.org/x/sync e225da77a7e68af35c70ccbf71af2b83e6acac3c

components/cli/vendor/golang.org/x/crypto/chacha20/chacha_arm64.go

Lines changed: 17 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

components/cli/vendor/golang.org/x/crypto/internal/chacha20/asm_arm64.s renamed to components/cli/vendor/golang.org/x/crypto/chacha20/chacha_arm64.s

File renamed without changes.

components/cli/vendor/golang.org/x/crypto/chacha20/chacha_generic.go

Lines changed: 364 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)