From ed687c03b84b7752376a2181a6dbee148c5b1432 Mon Sep 17 00:00:00 2001 From: Henare Degan Date: Wed, 7 Feb 2018 14:21:52 +1100 Subject: [PATCH] Update nokogiri to 1.8.2 In response to security advisory reported by bundler audit: ``` Name: nokogiri Version: 1.8.1 Advisory: CVE-2017-15412 Criticality: Unknown URL: https://github.com/sparklemotion/nokogiri/issues/1714 Title: Nokogiri gem, via libxml, is affected by DoS vulnerabilities Solution: upgrade to >= 1.8.2 Vulnerabilities found! ``` --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 3055f2f..73724db 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -58,7 +58,7 @@ GEM minitest (5.10.3) multipart-post (2.0.0) netrc (0.11.0) - nokogiri (1.8.1) + nokogiri (1.8.2) mini_portile2 (~> 2.3.0) octokit (4.7.0) sawyer (~> 0.8.0, >= 0.5.3)