Resolves: GHSA-8c26-wmh5-6g9v - CVE-2022-27191
Buildah doesn't seem to be directly affected as the logic in question
is not called.
golang.org/x/crypto@1baeb1ce contains the actual CVE fix. Using the
latest upstream commit to also include support for SHA-2.
Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
Add github.com/onsi/ginkgo and github.com/onsi/gomega to the set of
packages that we vendor, since 'go vet' cares about our tests importing
them. Revendor golang.org/x/net and golang.org/x/text to add new
subpackages that they require.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #711
Approved by: rhatdan
Drop back to a slightly older version of the runtime spec.
Vendor github.com/docker/docker to get type definitions.
Switch to the containers version of storage.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Lokesh Mandvekar
Miloslav Trmač
Nalin Dahyabhai