containerd/vendor
Sebastiaan van Stijn 2002411638
vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1
full diff: 60c769a6c5...69ecbb4d6d

Includes 69ecbb4d6d
(forward-port of 8b5121be2f),
to address CVE-2020-7919:

Panic in crypto/x509 certificate parsing and golang.org/x/crypto/cryptobyte
On 32-bit architectures, a malformed input to crypto/x509 or the ASN.1 parsing
functions of golang.org/x/crypto/cryptobyte can lead to a panic.
The malformed certificate can be delivered via a crypto/tls connection to a
client, or to a server that accepts client certificates. net/http clients can
be made to crash by an HTTPS server, while net/http servers that accept client
certificates will recover the panic and are unaffected.
Thanks to Project Wycheproof for providing the test cases that led to the
discovery of this issue. The issue is CVE-2020-7919 and Go issue golang.org/issue/36837.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-01-28 18:46:31 +01:00
..
github.com Merge pull request #3978 from dims/sync-with-latest-containerd-cri-master-including-selinux-change 2020-01-25 23:41:13 +02:00
go.etcd.io/bbolt bump go.etcd.io/bbolt v1.3.3 2019-08-09 22:56:54 +02:00
go.opencensus.io Revendor github.com/Microsoft/hcsshim 2019-08-20 13:50:24 -07:00
golang.org/x vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 2020-01-28 18:46:31 +01:00
google.golang.org bump google.golang.org/grpc v1.23.1 2019-10-21 17:56:20 +02:00
gopkg.in update dependencies of containerd/cri 2020-01-25 14:20:17 -05:00
gotest.tools Update vendor/ with new required vndr go.mod files 2019-04-28 18:20:43 -04:00
k8s.io update dependencies of containerd/cri 2020-01-25 14:20:17 -05:00
sigs.k8s.io/yaml Update cri to 4b4b2abb2e. 2019-01-02 10:50:25 -08:00