mirror of
https://github.com/kubernetes/sample-controller.git
synced 2026-05-01 00:00:03 +08:00
Robert Van Voorhees
c21e531b4a
Hello gophers, Version v0.3.3 of golang.org/x/text fixes a vulnerability in the golang.org/x/text/encoding/unicode package which could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String. transform.String has also been hardened not to enter an infinite loop if a Transformer keeps returning ErrShortSrc even if atEOF is true. This issue was first filed as Issue 39491 by GitHub user abacabadabacaba and reported to the security team by Anton Gyllenberg. It is tracked as CVE-2020-14040. Cheers, Katie for the Go team Kubernetes-commit: 3cef97e8b5f67b4a350ee7a51e68604732e46f58
24 lines
654 B
Modula-2
24 lines
654 B
Modula-2
// This is a generated file. Do not edit directly.
|
|
|
|
module k8s.io/sample-controller
|
|
|
|
go 1.13
|
|
|
|
require (
|
|
k8s.io/api v0.0.0
|
|
k8s.io/apimachinery v0.0.0
|
|
k8s.io/client-go v0.0.0
|
|
k8s.io/code-generator v0.0.0
|
|
k8s.io/klog/v2 v2.1.0
|
|
)
|
|
|
|
replace (
|
|
golang.org/x/sys => golang.org/x/sys v0.0.0-20190813064441-fde4db37ae7a // pinned to release-branch.go1.13
|
|
golang.org/x/tools => golang.org/x/tools v0.0.0-20190821162956-65e3620a7ae7 // pinned to release-branch.go1.13
|
|
k8s.io/api => ../api
|
|
k8s.io/apimachinery => ../apimachinery
|
|
k8s.io/client-go => ../client-go
|
|
k8s.io/code-generator => ../code-generator
|
|
k8s.io/sample-controller => ../sample-controller
|
|
)
|