podman/vendor/golang.org/x/crypto/internal/poly1305
Lokesh Mandvekar 5e680d54e9
Bump golang.org/x/crypto to 7b82a4e
Resolves: GHSA-8c26-wmh5-6g9v - CVE-2022-27191

Podman doesn't seem to be directly affected as the logic in question
is not called.

golang.org/x/crypto@1baeb1ce contains the actual CVE fix. Using the
latest upstream commit to also include support for SHA-2.

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2022-04-12 10:24:32 -04:00
..
bits_compat.go update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00
bits_go1.13.go update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00
mac_noasm.go update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00
poly1305.go update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00
sum_amd64.go update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00
sum_amd64.s update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00
sum_generic.go Bump golang.org/x/crypto to 7b82a4e 2022-04-12 10:24:32 -04:00
sum_ppc64le.go update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00
sum_ppc64le.s update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00
sum_s390x.go Bump golang.org/x/crypto to 7b82a4e 2022-04-12 10:24:32 -04:00
sum_s390x.s update buildah to latest and use new network stack 2022-01-12 17:40:12 +01:00