Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump nokogiri to address CVE-2017-15412 #477

Merged
merged 1 commit into from
Mar 30, 2018
Merged

Bump nokogiri to address CVE-2017-15412 #477

merged 1 commit into from
Mar 30, 2018

Conversation

Koronen
Copy link
Contributor

@Koronen Koronen commented Mar 20, 2018

As reported by bundler-audit:

Name: nokogiri
Version: 1.8.1
Advisory: CVE-2017-15412
Criticality: Unknown
URL: sparklemotion/nokogiri#1714
Title: Nokogiri gem, via libxml, is affected by DoS vulnerabilities
Solution: upgrade to >= 1.8.2

@Koronen
Bump nokogiri to address CVE-2017-15412
d070412 
As reported by `bundler-audit`:

> Name: nokogiri
> Version: 1.8.1
> Advisory: CVE-2017-15412
> Criticality: Unknown
> URL: sparklemotion/nokogiri#1714
> Title: Nokogiri gem, via libxml, is affected by DoS vulnerabilities
> Solution: upgrade to >= 1.8.2
@gabrielpoca gabrielpoca merged commit 28e4177 into master Mar 30, 2018
@Koronen Koronen deleted the vk-bump-nokogiri branch March 31, 2018 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@Koronen @gabrielpoca