Release 0.3.61

tzinfo · Jul 19, 2022 · 81cba44 · 81cba44
1 parent 01bcca5
commit 81cba44
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/CHANGES b/CHANGES
@@ -1,5 +1,9 @@
-== Version ?????? (tzdata v2022a) - ??????????
+== Version 0.3.61 (tzdata v2022a) - 19-Jul-2022
 
+* Fixed a relative path traversal bug that could cause arbitrary files to be
+  loaded with require from the Ruby load path. Please refer to
+  https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx for
+  details. CVE-2022-31163.
 * Updated to tzdata version 2022a
   (https://mm.icann.org/pipermail/tz-announce/2022-March/000070.html).
 

diff --git a/tzinfo.gemspec b/tzinfo.gemspec
@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name = 'tzinfo'
-  s.version = '0.3.60'
+  s.version = '0.3.61'
   s.author = 'Philip Ross'
   s.email = 'phil.ross@gmail.com'
   s.homepage = 'http://tzinfo.github.io'