From c12ac913717f6d8a25a0f5dcbd63579a743f798d Mon Sep 17 00:00:00 2001 From: Pau Perez Date: Tue, 24 Apr 2018 16:08:34 +0200 Subject: [PATCH] Update rubyzip to fix security issue Github reported us about CVE-2017-5946 which is a high severity issue. This gem is used by Roo which already supports the Rubyzip version that contains the fix (version 1.2.1). Check https://github.com/roo-rb/roo/commit/872bb3a0b67fbecf7dd4bc23ff03b7c2764462b0 for further details. Rubyzip's changelog for the version 1.2.1 can be found in https://github.com/rubyzip/rubyzip/blob/master/Changelog.md#121. --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index d6adb99a3d..b5284666c6 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -628,7 +628,7 @@ GEM ruby-progressbar (~> 1.7) unicode-display_width (~> 1.0, >= 1.0.1) ruby-progressbar (1.8.1) - rubyzip (1.2.0) + rubyzip (1.2.1) safe_yaml (1.0.4) sass (3.3.14) sass-rails (3.2.6)