Update to github.com/mtrmac/gpgme v0.1.2

This fixes CVE-2020-8945 by incorporating proglottis/gpgme#23 . Other changes included by the rebase: - Support for gpgme_off_t (~no-op with the RHEL 7 GPGME 1.3.2) - Wrapping a few more GPGME functions (irrelevant if we don't call them) - Better error reporting in Context.GetKey Given how invasive the CVE fix is (affecting basically all binding code), it seems safer to just update the package (and be verifiably equivalent with upstream) than to backport and try to back out the few other changes. Performed by updating vendor.conf, and $ mkdir -p _build/src/github.com/docker $ ln -s $(pwd) _build/src/github.com/docker/docker $ GOPATH=$(pwd)/_build:$GOPATH vndr github.com/mtrmac/gpgme Signed-off-by: Miloslav Trmač <mitr@redhat.com>
mtrmac · Feb 20, 2020 · 2c7552e · 2c7552e
1 parent 31b404f
commit 2c7552e
Show file tree

Hide file tree

Showing 9 changed files with 378 additions and 78 deletions.
diff --git a/vendor.conf b/vendor.conf
@@ -147,7 +147,7 @@ github.com/opencontainers/image-spec v1.0.0-rc4
 k8s.io/kubernetes 4a3f9c5b19c7ff804cbc1bf37a15c044ca5d2353 https://github.com/openshift/kubernetes
 github.com/golang/glog 44145f04b68cf362d9c4df2182967c2275eaefed
 github.com/ghodss/yaml 73d445a93680fa1a78ae23a5839bad48f32ba1ee
-github.com/mtrmac/gpgme master
+github.com/mtrmac/gpgme v0.1.2
 github.com/containers/storage master
 github.com/opencontainers/go-digest master
 

diff --git a/vendor/github.com/mtrmac/gpgme/README.md b/vendor/github.com/mtrmac/gpgme/README.md
diff --git a/vendor/github.com/mtrmac/gpgme/data.go b/vendor/github.com/mtrmac/gpgme/data.go
diff --git a/vendor/github.com/mtrmac/gpgme/go.mod b/vendor/github.com/mtrmac/gpgme/go.mod
diff --git a/vendor/github.com/mtrmac/gpgme/go_gpgme.c b/vendor/github.com/mtrmac/gpgme/go_gpgme.c
diff --git a/vendor/github.com/mtrmac/gpgme/go_gpgme.h b/vendor/github.com/mtrmac/gpgme/go_gpgme.h