cyberark / secretless-broker

Secure your apps by making them Secretless
Apache License 2.0
234 stars 42 forks source link

Bump golang.org/x/crypto to address CVE #1410

Closed izgeri closed 3 years ago

izgeri commented 3 years ago

What does this PR do?

Bump golang.org/x/crypto to address CVE-2020-29652. Note that this CVE allows remote attackers to cause a denial of service against SSH servers; since Secretless is not an SSH server, we are not likely to be vulnerable.

Incrementing the library version in any case.

What ticket does this PR close?

n/a

Checklists

Change log

Test coverage

Documentation

(For releases only) Manual tests

codeclimate[bot] commented 3 years ago

Code Climate has analyzed commit 65267a0b and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 53.6% (0.0% change).

View more on Code Climate.