Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update rubyzip to address CVE-2019-16892 #1825

Merged
merged 1 commit into from Oct 3, 2019
Merged

update rubyzip to address CVE-2019-16892 #1825

merged 1 commit into from Oct 3, 2019

Conversation

@robbkidd
Copy link
Member

robbkidd commented Oct 3, 2019

Description

This is an audit appeaser. Supermarket does not use rubyzip during operation. It comes in as a depencency of license_finder which is a dev/test time tool. This updates that gem, too.

Related Issue

Once merged, this should address the error seen in #1824.

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Chore (non-breaking change that does not add functionality or fix an issue)

Checklist:

  • I have read the CONTRIBUTING document.
  • I have run the pre-merge tests locally and they pass.
  • I have updated the documentation accordingly.
  • I have added tests to cover my changes.
  • All new and existing tests passed.
  • All commits have been signed-off for the Developer Certificate of Origin.
This is an audit appeaser. Supermarket does not use rubyzip during
operation. It comes in as a depencency of license_finder which is a
dev/test time tool. This updates that gem, too.

Signed-off-by: Robb Kidd <rkidd@chef.io>
@robbkidd robbkidd merged commit d95a1c3 into master Oct 3, 2019
3 checks passed
3 checks passed
DCO This commit has a DCO Signed-off-by
Details
continuous-integration/travis-ci/pr The Travis CI build passed
Details
expeditor/config-validation Validated your Expeditor config file
Details
@chef-expeditor chef-expeditor bot deleted the robb/bump-rubyzip branch Oct 3, 2019
@robbkidd robbkidd mentioned this pull request Oct 3, 2019
0 of 10 tasks complete
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked issues

Successfully merging this pull request may close these issues.

None yet

1 participant
You can’t perform that action at this time.