tree b3a89c3a7c8a90357e04e995e609fa0273f4a94a
parent 1cc2776a0b654c01c431639926ee090310dd12ae
author Kent 'picat' Gruber <kent@hashicorp.com> 1604955233 -0500
committer Katy Moe <katy@katy.moe> 1606498873 +0000
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEECchNi/F0qwd2YbTrjDeA9tzdqIUFAl/BOjkACgkQjDeA9tzd
 qIUFAA/+KMrNcAfd9Ap9i5HIarRLQ87tksdVIRtX68ZQQOcC5g9AUFfAzSUBBNUE
 cI6EBQWG96Fec9vHjvhRPbPwtgVjmO0OIqnKMTq6HrxH8zHI1FP+GbjfLkAiFJyc
 xI0wFMocmNMKmhj3vmEp12RiLuf6DVM0nBlfmUPFX01JZwNekzL0zui59VD8AP2r
 R1zTsdEKVQMGH8FgIkh20Ob7I6qSMKrBk2hcXbvfFaqIhFhfYnL8lID1wfIfOc67
 Mup95Tcq8gCzp7tD4eEfiKlMF+Js0Z6ShSo/t8pVws70FiqWoKxllD9qnSv9iRAr
 adAtImLR9vaBtEFlpD/zqXIjYVxu5jQIw2HOmxUxjjQtiHLNtRajdP8JIXpPZcpq
 CxzxHL5Yx9p5kxEmgSUWr0EVp3H6uKLIStBM978oWQwILLl/iFRL5Ox+RSZl/Ss+
 HLmO1sQy+Txki4tiWfYAnONUuJzbCqU3VBXBam39pRySp0xLLOpDYPdWD4oufr1P
 HH7ZVv2mB2L1SFjsbXacQ6y8tEoxMyaVUOw221qAuOGXjbCIIeS99H7m0CB0xyXw
 re7iyw9jEZNyAm0HUCcG+/Iy688ZYdEjvfvsYCpljUHzVq6YRkCghwWj8QQ0nTZd
 FN1DL4zb+PONR/xlrdjfT+qb5Exl9PSyPaxLchxoUY8VmOR4ocY=
 =FM9D
 -----END PGP SIGNATURE-----

Bump go-getter to v1.5.0

github.com/ulikunitz/xz@0.5.5 used by github.com/hashicorp/go-getter@1.4.0 contains a DoS where it is possible to create an infinite read loop due to the usage of the ReadUvarint and ReadVarint function when encoding/binary via invalid inputs.

https://github.com/hashicorp/go-getter/pull/278