From c5314d3ff00b05a4b753d6aebf55e30c0da74cbc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 22 Jul 2022 05:26:56 +0000 Subject: [PATCH] Bump tzinfo from 1.2.9 to 1.2.10 in /docs Bumps [tzinfo](https://github.com/tzinfo/tzinfo) from 1.2.9 to 1.2.10. - [Release notes](https://github.com/tzinfo/tzinfo/releases) - [Changelog](https://github.com/tzinfo/tzinfo/blob/master/CHANGES.md) - [Commits](https://github.com/tzinfo/tzinfo/compare/v1.2.9...v1.2.10) --- updated-dependencies: - dependency-name: tzinfo dependency-type: indirect ... Signed-off-by: dependabot[bot] --- CHANGELOG.md | 4 ++++ docs/Gemfile.lock | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 990935f3ff..575c7eda49 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,6 +14,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. - Adds support for authentication using OIDC's code authorization flow [cyberark/conjur#2595](https://github.com/cyberark/conjur/pull/2595) +### Security +- Updated tzinfo to 1.2.10 to address CVE-2022-31163 + [cyberark/conjur#2610](https://github.com/cyberark/conjur/pull/2610) + ## [1.17.8] - 2022-07-14 ### Security diff --git a/docs/Gemfile.lock b/docs/Gemfile.lock index e3781c2fcc..de47be57b2 100644 --- a/docs/Gemfile.lock +++ b/docs/Gemfile.lock @@ -270,7 +270,7 @@ GEM thread_safe (0.3.6) typhoeus (1.4.0) ethon (>= 0.9.0) - tzinfo (1.2.9) + tzinfo (1.2.10) thread_safe (~> 0.1) unf (0.1.4) unf_ext