build: upgrade golang.org/x/net to v0.17.0 to fix HTTP/2 rapid reset

Vulnerability1: GO-2023-2102

HTTP/2 rapid reset can cause excessive work in net/http

More info: https://pkg.go.dev/vuln/GO-2023-2102
This commit is contained in:
Nick Craig-Wood
2023-10-12 17:44:16 +01:00
parent d8d76ff647
commit b9727cc6ab
2 changed files with 12 additions and 12 deletions
+4 -4
View File
@@ -67,11 +67,11 @@ require (
github.com/yunify/qingstor-sdk-go/v3 v3.2.0
go.etcd.io/bbolt v1.3.7
goftp.io/server/v2 v2.0.1
golang.org/x/crypto v0.13.0
golang.org/x/net v0.15.0
golang.org/x/crypto v0.14.0
golang.org/x/net v0.17.0
golang.org/x/oauth2 v0.10.0
golang.org/x/sync v0.3.0
golang.org/x/sys v0.12.0
golang.org/x/sys v0.13.0
golang.org/x/text v0.13.0
golang.org/x/time v0.3.0
google.golang.org/api v0.134.0
@@ -174,5 +174,5 @@ require (
github.com/google/go-querystring v1.1.0 // indirect
github.com/pkg/xattr v0.4.9
golang.org/x/mobile v0.0.0-20230531173138-3c911d8e3eda
golang.org/x/term v0.12.0
golang.org/x/term v0.13.0
)