Commits on Nov 28, 2019

1. fix go mod vendor …

   commits f7fe884 and d52f528
   enabled go modules and vendored dependencies, but did not include go-spew as a dependency.
   
   This was later on addressed by 3f088a4, but did not update
   the vendored files.
   
   This patch is the result of re-running `go mod vendor` to vendor go-spew.
   
   Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

   

   thaJeztah committed Nov 28, 2019
   Configuration menu

   • View commit details
   • Copy full SHA for 3561805
   • Browse repository at this point

   Copy the full SHA

   3561805 View commit details

   Browse the repository at this point in the history

2. Update gopkg.in/yaml.v2 to v2.2.7 (CVE-2019-11253) …

   full diff: go-yaml/yaml@v2.2.2...v2.2.7
   
   includes:
   
   - go-yaml/yaml@caeefd8
     addresses CVE-2019-11253 JSON/YAML parsing vulnerable to resource exhaustion attack
   - go-yaml/yaml#171 Tighten restrictions on float decoding
   - go-yaml/yaml#515 Add large document benchmarks, tune alias heuristic, add max depth limits
   - go-yaml/yaml@f90ceb4
     fixes go-yaml/yaml#529 yaml.Unmarshal crashes on "assignment to entry in nil map"
   - go-yaml/yaml#543 Port stale simple_keys fix to v2
   - go-yaml/yaml@1f64d61
     fixes go-yaml/yaml#548 Invalid simple_keys now cause panics later in decode
   
   Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

   

   thaJeztah committed Nov 28, 2019
   Configuration menu

   • View commit details
   • Copy full SHA for 91bdfd9
   • Browse repository at this point

   Copy the full SHA

   91bdfd9 View commit details

   Browse the repository at this point in the history