From 2e9eb97f4ce2f80b8f1023850f5b86fc7d78bf0c Mon Sep 17 00:00:00 2001 From: Alex Tomlins Date: Thu, 15 Nov 2018 16:45:03 +0000 Subject: [PATCH] Upgrade rack to 2.0.6 To fix CVE-2018-16470 [1]. This isn't a significant thing for us as this is a static site generator, so rack isn't running in production, but it's worth updating to avoid the noise etc. [1]https://groups.google.com/forum/#!msg/rubyonrails-security/U_x-YkfuVTg/xhvYAmp6AAAJ --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index e31633fb..923e7b51 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -145,7 +145,7 @@ GEM activesupport (>= 3.1) parallel (1.12.1) public_suffix (3.0.2) - rack (2.0.5) + rack (2.0.6) rack-livereload (0.3.17) rack rake (12.3.1)