afero icon indicating copy to clipboard operation
afero copied to clipboard

fix(deps): golang.org/x/crypto, golang.org/x/text

Open gnanderson opened this issue 2 years ago • 1 comments

  • x/crypto - CVE-2020-9283, improper signature verification
  • x/crypto - CVE-2020-29652, nil pointer dereference
  • x/text - out of bounds read in <= v0.3.6

gnanderson avatar Aug 11 '22 15:08 gnanderson

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar Aug 11 '22 15:08 CLAassistant

Please consider upgrading x/text to 0.3.8 or newer to resolve https://github.com/spf13/afero/issues/381

MichaelMcAleer avatar Nov 23 '22 11:11 MichaelMcAleer

Hey folks, can we get these in? 🙏

adrianosela avatar Jan 12 '23 15:01 adrianosela

@bep any chance these could be addressed?

vjanelle avatar Mar 05 '23 18:03 vjanelle

Will handle this in https://github.com/spf13/afero/pull/386

bep avatar Mar 06 '23 08:03 bep