Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade to RubyZip 1.1.0 to resolve installation problems with newer gems. #183

Open
akshayrawat opened this issue Jun 5, 2014 · 4 comments

Comments

@akshayrawat
Copy link

IronWorker uses an ancient and exact version of RubyZip 0.9.9 (released June 17, 2012). Most recent gems need RubyZip 1.0.x (released Aug, 2013) or higher. This results in installation problems when the IronWorker gem is to be used with such gems.

Lets upgrade this gem to use the RubyZip ~> 1.1.0

@akshayrawat
Copy link
Author

I'm not sure why the RubyZip version was downgraded - 2d2d62a

@treeder
Copy link
Contributor

treeder commented Jun 6, 2014

Ya, we need to figure this out, I can't remember why we reverted it.

@treeder
Copy link
Contributor

treeder commented Jun 23, 2014

I made pull request #185 to upgrade rubyzip, but I'm a little weary since I don't know the reason why it was downgraded in the first place.

@gtd
Copy link

gtd commented Mar 3, 2017

FWIW, rubyzip <= 1.2.0 has a serious security vulnerability: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5946

@gtd gtd unassigned iced Mar 3, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants