Skip to content

Commit

Permalink
Minimal changes to solve Dependency CVEs [VAULT-871] (#11015)
Browse files Browse the repository at this point in the history
* minimal changes to solve most of the cves

* cleanup

* finished go mod vendor upgrades
  • Loading branch information
Hridoy Roy authored Mar 1, 2021
1 parent ed62faf commit c41ecae
Show file tree
Hide file tree
Showing 243 changed files with 52,969 additions and 11,029 deletions.
3 changes: 3 additions & 0 deletions changelog/11015.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
```release-note:improvement
changelog: Add dependencies listed in dependencies/2-25-21
```
17 changes: 17 additions & 0 deletions dependencies/2-25-21/deps-upgrade-output.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
hridoyroy@Hridoys-MBP vault % python3 deps_upgrade.py dep.txt
github.com/satori/go.uuid
golang.org/x/text
github.com/hashicorp/go-gcp-common
github.com/hashicorp/vault-plugin-secrets-azure
go.mongodb.org/mongo-driver
github.com/Microsoft/hcsshim
package github.com/Microsoft/hcsshim
imports github.com/Microsoft/go-winio/pkg/guid
imports golang.org/x/sys/windows: build constraints exclude all Go files in /Users/hridoyroy/go/pkg/mod/golang.org/x/[email protected]/windows
golang.org/x/crypto
github.com/containerd/containerd
github.com/aws/aws-sdk-go
github.com/hashicorp/serf
github.com/miekg/dns
github.com/hashicorp/go-discover
github.com/hashicorp/serf
12 changes: 12 additions & 0 deletions dependencies/2-25-21/deps-upgrade.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
golang.org/x/text
github.com/hashicorp/go-gcp-common
github.com/hashicorp/vault-plugin-secrets-azure
go.mongodb.org/mongo-driver
github.com/Microsoft/hcsshim
golang.org/x/crypto
github.com/containerd/containerd
github.com/aws/aws-sdk-go
github.com/hashicorp/serf
github.com/miekg/dns
github.com/hashicorp/go-discover
github.com/hashicorp/serf
17 changes: 11 additions & 6 deletions go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,7 @@ require (
github.com/Azure/azure-storage-blob-go v0.11.0
github.com/Azure/go-autorest/autorest v0.11.10
github.com/Azure/go-autorest/autorest/adal v0.9.5
github.com/Microsoft/hcsshim v0.8.14 // indirect
github.com/NYTimes/gziphandler v1.1.1
github.com/SAP/go-hdb v0.14.1
github.com/Sectorbob/mlab-ns2 v0.0.0-20171030222938-d3aa0c295a8a
Expand All @@ -25,12 +26,13 @@ require (
github.com/armon/go-proxyproto v0.0.0-20190211145416-68259f75880e
github.com/armon/go-radix v1.0.0
github.com/asaskevich/govalidator v0.0.0-20180720115003-f9ffefc3facf
github.com/aws/aws-sdk-go v1.34.28
github.com/aws/aws-sdk-go v1.37.19
github.com/bitly/go-hostpool v0.1.0 // indirect
github.com/cenkalti/backoff/v3 v3.0.0
github.com/chrismalek/oktasdk-go v0.0.0-20181212195951-3430665dfaa0
github.com/client9/misspell v0.3.4
github.com/cockroachdb/cockroach-go v0.0.0-20181001143604-e0a95dfd547c
github.com/containerd/containerd v1.4.3 // indirect
github.com/coreos/go-semver v0.2.0
github.com/denisenkom/go-mssqldb v0.0.0-20200428022330-06a60b6afbbc
github.com/docker/docker v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
Expand All @@ -56,7 +58,7 @@ require (
github.com/hashicorp/errwrap v1.1.0
github.com/hashicorp/go-bindata v3.0.8-0.20180209072458-bf7910af8997+incompatible
github.com/hashicorp/go-cleanhttp v0.5.1
github.com/hashicorp/go-discover v0.0.0-20200812215701-c4b85f6ed31f
github.com/hashicorp/go-discover v0.0.0-20201029210230-738cb3105cd0
github.com/hashicorp/go-gcp-common v0.6.0
github.com/hashicorp/go-hclog v0.14.1
github.com/hashicorp/go-kms-wrapping v0.5.16
Expand All @@ -74,6 +76,7 @@ require (
github.com/hashicorp/nomad/api v0.0.0-20191220223628-edc62acd919d
github.com/hashicorp/raft v1.1.3-0.20201002073007-f367681f9c48
github.com/hashicorp/raft-snapshot v1.0.3
github.com/hashicorp/serf v0.9.5 // indirect
github.com/hashicorp/vault-plugin-auth-alicloud v0.7.0
github.com/hashicorp/vault-plugin-auth-azure v0.6.0
github.com/hashicorp/vault-plugin-auth-centrify v0.7.0
Expand All @@ -90,7 +93,7 @@ require (
github.com/hashicorp/vault-plugin-mock v0.16.1
github.com/hashicorp/vault-plugin-secrets-ad v0.8.0
github.com/hashicorp/vault-plugin-secrets-alicloud v0.7.0
github.com/hashicorp/vault-plugin-secrets-azure v0.8.0
github.com/hashicorp/vault-plugin-secrets-azure v0.8.1
github.com/hashicorp/vault-plugin-secrets-gcp v0.6.6-0.20210121193032-bb12fd5092bd
github.com/hashicorp/vault-plugin-secrets-gcpkms v0.7.0
github.com/hashicorp/vault-plugin-secrets-kv v0.7.0
Expand All @@ -111,6 +114,7 @@ require (
github.com/mattn/go-colorable v0.1.7
github.com/mholt/archiver v3.1.1+incompatible
github.com/michaelklishin/rabbit-hole v0.0.0-20191008194146-93d9988f0cd5
github.com/miekg/dns v1.1.40 // indirect
github.com/mitchellh/cli v1.1.1
github.com/mitchellh/copystructure v1.0.0
github.com/mitchellh/go-homedir v1.1.0
Expand Down Expand Up @@ -149,12 +153,13 @@ require (
github.com/yuin/gopher-lua v0.0.0-20200816102855-ee81675732da // indirect
go.etcd.io/bbolt v1.3.5
go.etcd.io/etcd v0.5.0-alpha.5.0.20200425165423-262c93980547
go.mongodb.org/mongo-driver v1.4.2
go.mongodb.org/mongo-driver v1.4.6
go.uber.org/atomic v1.6.0
golang.org/x/crypto v0.0.0-20201002170205-7f63de1d35b0
golang.org/x/net v0.0.0-20201002202402-0a1ea396d57c
golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83
golang.org/x/net v0.0.0-20201110031124-69a78807bb2b
golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d
golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c
golang.org/x/text v0.3.5 // indirect
golang.org/x/tools v0.0.0-20200521155704-91d71f6c2f04
google.golang.org/api v0.29.0
google.golang.org/grpc v1.29.1
Expand Down
Loading

0 comments on commit c41ecae

Please sign in to comment.