7e290869e7
Includes69ecbb4d6d(forward-port of8b5121be2f), which fixes CVE-2020-7919: - Panic in crypto/x509 certificate parsing and golang.org/x/crypto/cryptobyte On 32-bit architectures, a malformed input to crypto/x509 or the ASN.1 parsing functions of golang.org/x/crypto/cryptobyte can lead to a panic. The malformed certificate can be delivered via a crypto/tls connection to a client, or to a server that accepts client certificates. net/http clients can be made to crash by an HTTPS server, while net/http servers that accept client certificates will recover the panic and are unaffected. Thanks to Project Wycheproof for providing the test cases that led to the discovery of this issue. The issue is CVE-2020-7919 and Go issue golang.org/issue/36837. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
58 lines
3.1 KiB
Modula-2
58 lines
3.1 KiB
Modula-2
module github.com/docker/distribution
|
|
|
|
go 1.12
|
|
|
|
require (
|
|
github.com/Azure/azure-sdk-for-go v16.2.1+incompatible
|
|
github.com/Azure/go-autorest v10.8.1+incompatible // indirect
|
|
github.com/Shopify/logrus-bugsnag v0.0.0-20171204204709-577dee27f20d
|
|
github.com/aws/aws-sdk-go v1.15.11
|
|
github.com/beorn7/perks v0.0.0-20160804104726-4c0e84591b9a // indirect
|
|
github.com/bitly/go-simplejson v0.5.0 // indirect
|
|
github.com/bmizerany/assert v0.0.0-20160611221934-b7ed37b82869 // indirect
|
|
github.com/bshuster-repo/logrus-logstash-hook v0.4.1
|
|
github.com/bugsnag/bugsnag-go v0.0.0-20141110184014-b1d153021fcd
|
|
github.com/bugsnag/osext v0.0.0-20130617224835-0dd3f918b21b // indirect
|
|
github.com/bugsnag/panicwrap v0.0.0-20151223152923-e2c28503fcd0 // indirect
|
|
github.com/denverdino/aliyungo v0.0.0-20190125010748-a747050bb1ba
|
|
github.com/dgrijalva/jwt-go v0.0.0-20170104182250-a601269ab70c // indirect
|
|
github.com/dnaeon/go-vcr v1.0.1 // indirect
|
|
github.com/docker/go-metrics v0.0.0-20180209012529-399ea8c73916
|
|
github.com/docker/libtrust v0.0.0-20150114040149-fa567046d9b1
|
|
github.com/garyburd/redigo v0.0.0-20150301180006-535138d7bcd7
|
|
github.com/gorilla/handlers v0.0.0-20150720190736-60c7bfde3e33
|
|
github.com/gorilla/mux v1.7.2
|
|
github.com/inconshreveable/mousetrap v1.0.0 // indirect
|
|
github.com/jmespath/go-jmespath v0.0.0-20160803190731-bd40a432e4c7 // indirect
|
|
github.com/kr/pretty v0.1.0 // indirect
|
|
github.com/marstr/guid v1.1.0 // indirect
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
|
|
github.com/mitchellh/mapstructure v1.1.2
|
|
github.com/mitchellh/osext v0.0.0-20151018003038-5e2d6d41470f // indirect
|
|
github.com/ncw/swift v1.0.47
|
|
github.com/opencontainers/go-digest v0.0.0-20170106003457-a6d0ee40d420
|
|
github.com/opencontainers/image-spec v1.0.0
|
|
github.com/prometheus/client_golang v0.0.0-20180209125602-c332b6f63c06 // indirect
|
|
github.com/prometheus/client_model v0.0.0-20171117100541-99fa1f4be8e5 // indirect
|
|
github.com/prometheus/common v0.0.0-20180110214958-89604d197083 // indirect
|
|
github.com/prometheus/procfs v0.0.0-20180125133057-cb4147076ac7 // indirect
|
|
github.com/satori/go.uuid v1.2.0 // indirect
|
|
github.com/sirupsen/logrus v1.4.2
|
|
github.com/smartystreets/goconvey v0.0.0-20190330032615-68dc04aab96a // indirect
|
|
github.com/spf13/cobra v0.0.3
|
|
github.com/spf13/pflag v1.0.3 // indirect
|
|
github.com/stretchr/testify v1.3.0 // indirect
|
|
github.com/yvasiyarov/go-metrics v0.0.0-20140926110328-57bccd1ccd43 // indirect
|
|
github.com/yvasiyarov/gorelic v0.0.0-20141212073537-a9bba5b9ab50
|
|
github.com/yvasiyarov/newrelic_platform_go v0.0.0-20140908184405-b21fdbd4370f // indirect
|
|
golang.org/x/crypto v0.0.0-20200128174031-69ecbb4d6d5d
|
|
golang.org/x/net v0.0.0-20190619014844-b5b0513f8c1b // indirect
|
|
golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45
|
|
golang.org/x/sys v0.0.0-20190602015325-4c4f7f33c9ed // indirect
|
|
google.golang.org/api v0.0.0-20160322025152-9bf6e6e569ff
|
|
google.golang.org/cloud v0.0.0-20151119220103-975617b05ea8
|
|
google.golang.org/grpc v0.0.0-20160317175043-d3ddb4469d5a // indirect
|
|
gopkg.in/check.v1 v1.0.0-20141024133853-64131543e789
|
|
gopkg.in/yaml.v2 v2.2.2
|
|
)
|