podman/vendor/golang.org/x/crypto/internal
Lokesh Mandvekar 5e680d54e9
Bump golang.org/x/crypto to 7b82a4e
Resolves: GHSA-8c26-wmh5-6g9v - CVE-2022-27191

Podman doesn't seem to be directly affected as the logic in question
is not called.

golang.org/x/crypto@1baeb1ce contains the actual CVE fix. Using the
latest upstream commit to also include support for SHA-2.

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2022-04-12 10:24:32 -04:00
..
poly1305 Bump golang.org/x/crypto to 7b82a4e 2022-04-12 10:24:32 -04:00
subtle Bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1 2021-04-13 08:01:58 +00:00