[20.10] vendor: github.com/moby/buildkit v0.8.3-4-gbc07b2b8

imageutil: make mediatype detection more stricter to mitigate CVE-2021-41190. full diff: moby/buildkit@244e8cd...bc07b2b Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
moby · Nov 17, 2021 · da9c983 · da9c983
1 parent 7bd682c
commit da9c983
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 7 deletions.
diff --git a/vendor.conf b/vendor.conf
@@ -33,7 +33,7 @@ github.com/imdario/mergo                            1afb36080aec31e0d1528973ebe6
 golang.org/x/sync                                   cd5d95a43a6e21273425c7ae415d3df9ea832eeb
 
 # buildkit
-github.com/moby/buildkit                            244e8cde639f71a05a1a2e0670bd88e0206ce55c # v0.8.3-3-g244e8cde
+github.com/moby/buildkit                            bc07b2b81b1c6a62d29981ac564b16a15ce2bfa7 # v0.8.3-4-gbc07b2b8
 github.com/tonistiigi/fsutil                        0834f99b7b85462efb69b4f571a4fa3ca7da5ac9
 github.com/tonistiigi/units                         6950e57a87eaf136bbe44ef2ec8e75b9e3569de2
 github.com/grpc-ecosystem/grpc-opentracing          8e809c8a86450a29b90dcc9efbf062d0fe6d9746

diff --git a/vendor/github.com/moby/buildkit/util/imageutil/config.go b/vendor/github.com/moby/buildkit/util/imageutil/config.go