Skip to content

Commit e0ff7cc

Browse files
committed
vendor: update to github.com/vbatts/tar-split@v0.10.2
Update to the latest version of tar-split, which includes a change to fix a memory exhaustion issue where a malformed image could cause the Docker daemon to crash. * tar: asm: store padding in chunks to avoid memory exhaustion Fixes: CVE-2017-14992 Signed-off-by: Aleksa Sarai <asarai@suse.de>
1 parent eec662b commit e0ff7cc

File tree

3 files changed

+31
-17
lines changed

3 files changed

+31
-17
lines changed

vendor.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ github.com/miekg/dns 75e6e86cc601825c5dbcd4e0c209eab180997cd7
5555

5656
# get graph and distribution packages
5757
github.com/docker/distribution edc3ab29cdff8694dd6feb85cfeb4b5f1b38ed9c
58-
github.com/vbatts/tar-split v0.10.1
58+
github.com/vbatts/tar-split v0.10.2
5959
github.com/opencontainers/go-digest a6d0ee40d4207ea02364bd3b9e8e77b9159ba1eb
6060

6161
# get go-zfs packages

vendor/github.com/vbatts/tar-split/README.md

Lines changed: 2 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

vendor/github.com/vbatts/tar-split/tar/asm/disassemble.go

Lines changed: 28 additions & 15 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)