aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Yong Tang <yong.tang.github@outlook.com> 2022-05-25 23:28:08 -0700
committerGravatar GitHub <noreply@github.com> 2022-05-25 23:28:08 -0700
commit2c05834f913fe4e1983fe95a580a5e9fca675053 (patch)
tree8adfd682140d17260b37434ecbf1a6ffad459d3b
parent91bcbc2e3ada7c034e0cca022a717871684dd5ca (diff)
downloadcoredns-2c05834f913fe4e1983fe95a580a5e9fca675053.tar.gz
coredns-2c05834f913fe4e1983fe95a580a5e9fca675053.tar.zst
coredns-2c05834f913fe4e1983fe95a580a5e9fca675053.zip
Update golang.org/x/crypto to the latest version (#5407)
It looks like dependabot couldn't update golang.org/x/crypto automatically to fix the CVE-2022-27191: https://github.com/coredns/coredns/discussions/5403#discussion-4099726 This PR manually fix the dependency. Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
-rw-r--r--go.mod2
-rw-r--r--go.sum3
2 files changed, 3 insertions, 2 deletions
diff --git a/go.mod b/go.mod
index 74a48f1a1..3cfbe6b78 100644
--- a/go.mod
+++ b/go.mod
@@ -24,7 +24,7 @@ require (
github.com/prometheus/common v0.34.0
go.etcd.io/etcd/api/v3 v3.5.4
go.etcd.io/etcd/client/v3 v3.5.4
- golang.org/x/crypto v0.0.0-20220214200702-86341886e292
+ golang.org/x/crypto v0.0.0-20220525230936-793ad666bf5e
golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6
google.golang.org/api v0.80.0
google.golang.org/grpc v1.46.2
diff --git a/go.sum b/go.sum
index d340f304e..61795dd7e 100644
--- a/go.sum
+++ b/go.sum
@@ -950,8 +950,9 @@ golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97/go.mod h1:GvvjBRRGRdwPK5y
golang.org/x/crypto v0.0.0-20210920023735-84f357641f63/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.0.0-20220214200702-86341886e292 h1:f+lwQ+GtmgoY+A2YaQxlSOnDjXcQ7ZRLWOHbC6HtRqE=
golang.org/x/crypto v0.0.0-20220214200702-86341886e292/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
+golang.org/x/crypto v0.0.0-20220525230936-793ad666bf5e h1:T8NU3HyQ8ClP4SEE+KbFlg6n0NhuTsN4MyznaarGsZM=
+golang.org/x/crypto v0.0.0-20220525230936-793ad666bf5e/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=