vendor: update some dependencies - Githubissues

moby / vpnkit

A toolkit for embedding VPN capabilities in your application

Apache License 2.0

1.09k stars 182 forks source link

vendor: update some dependencies #639

Open thaJeztah opened 5 months ago

thaJeztah commented 5 months ago

vendor: github.com/sirupsen/logrus v1.9.3

Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newline.
Fix panic in Writer

full diff: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.3

vendor: golang.org/x/crypto v0.17.0

update to address GO-2023-2402 / CVE-2023-48795

full diff: https://github.com/golang/crypto/compare/v0.9.0...v0.17.0

vendor: golang.org/x/net v0.17.0

update to address GO-2023-2102 / CVE-2023-39325

vendor: github.com/labstack/echo v4.11.4

Upgrade golang.org/x/crypto to v0.17.0 to fix vulnerability
Update deps and mark Go version to 1.18 as this is what golang.org/x/* use
Request logger: add example for Slog

full diff: https://github.com/labstack/echo/compare/v4.10.2...v4.11.4