denisenkom / go-mssqldb

Microsoft SQL server driver written in go language
BSD 3-Clause "New" or "Revised" License
1.82k stars 499 forks source link

security: update golang.org/x/crypto (CVE-2020-14040) #761

Closed dominicbarnes closed 1 year ago

dominicbarnes commented 2 years ago

This PR patches a security vulnerability in the golang.org/x/crypto package, see CVE-2020-14040 for more details.

Updating to the latest version of this package addresses the vulnerability and does not change test behavior as far as I can tell.

codecov[bot] commented 2 years ago

Codecov Report

Merging #761 (2391e9e) into master (1598eaf) will decrease coverage by 0.18%. The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #761      +/-   ##
==========================================
- Coverage   71.32%   71.13%   -0.19%     
==========================================
  Files          24       24              
  Lines        5388     5388              
==========================================
- Hits         3843     3833      -10     
- Misses       1301     1307       +6     
- Partials      244      248       +4     
Impacted Files Coverage Δ
tds.go 65.49% <0.00%> (-0.73%) :arrow_down:
token.go 63.62% <0.00%> (-0.59%) :arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 1598eaf...2391e9e. Read the comment docs.