Skip to content

Commit 41dbb0e

Browse files
committed
Update to github.com/mtrmac/gpgme v0.1.2
This fixes CVE-2020-8945 by incorporating proglottis/gpgme#23 . Other changes included by the rebase: - Support for gpgme_off_t (~no-op on Linux) - Wrapping a few more GPGME functions (irrelevant if we don't call them) Given how invasive the CVE fix is (affecting basically all binding code), it seems safer to just update the package (and be verifiably equivalent with upstream) than to backport and try to back out the few other changes. Performed by updating vendor conf and $ vndr github.com/mtrmac/gpgme Signed-off-by: Miloslav Trmač <mitr@redhat.com>
1 parent 5c3a5dd commit 41dbb0e

8 files changed

Lines changed: 357 additions & 78 deletions

File tree

vendor.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ github.com/xeipuuv/gojsonschema v1.1.0
4747
go4.org ce4c26f7be8eb27dc77f996b08d286dd80bc4a01 https://github.com/camlistore/go4
4848
github.com/ostreedev/ostree-go 56f3a639dbc0f2f5051c6d52dade28a882ba78ce
4949
# -- end OCI image validation requirements
50-
github.com/mtrmac/gpgme b2432428689ca58c2b8e8dea9449d3295cf96fc9
50+
github.com/mtrmac/gpgme v0.1.2
5151
# openshift/origin' k8s dependencies as of OpenShift v1.1.5
5252
k8s.io/client-go kubernetes-1.10.13-beta.0
5353
github.com/ghodss/yaml 73d445a93680fa1a78ae23a5839bad48f32ba1ee

vendor/github.com/mtrmac/gpgme/data.go

Lines changed: 12 additions & 6 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

vendor/github.com/mtrmac/gpgme/go.mod

Lines changed: 3 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

vendor/github.com/mtrmac/gpgme/go_gpgme.c

Lines changed: 22 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

vendor/github.com/mtrmac/gpgme/go_gpgme.h

Lines changed: 12 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)