Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

vendor: golang.org/x/crypto v0.16.0, golang.org/x/sys v0.15.0, golang.org/x/text v0.14.0 #4726

Merged
merged 3 commits into from
Dec 18, 2023

Conversation

thaJeztah
Copy link
Member

The Go team pre-announced a security update for golang.org/x/crypto/ssh. While it's likely not something that affects us, we may consider updating the dependency to keep scanners at bay.

This patch updates the golang.org/x/crypto package to the current release (v0.16.0), so that updating to the new release would only bring in the security fixes (without other changes).

vendor: golang.org/x/sys v0.15.0

full diff: golang/sys@v0.13.0...v0.15.0

vendor: golang.org/x/text v0.14.0

full diff: golang/text@v0.13.0...v0.14.0

vendor: golang.org/x/crypto v0.16.0

full diff: golang/crypto@v0.14.0...v0.16.0

- Description for the changelog

- A picture of a cute animal (not mandatory but encouraged)

@thaJeztah thaJeztah added this to the 25.0.0 milestone Dec 18, 2023
@thaJeztah thaJeztah self-assigned this Dec 18, 2023
@thaJeztah thaJeztah merged commit 1866448 into docker:master Dec 18, 2023
76 checks passed
@thaJeztah thaJeztah deleted the update_crypto branch December 18, 2023 13:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants