Skip to content

Commit

Permalink
Update nokogiri for a security patch (#22)
Browse files Browse the repository at this point in the history
## Problem:

The `bundle-audit` command reported a vulnerability in nokogiri:

```
Name: nokogiri
Version: 1.6.7.2
Advisory: CVE-2015-8806
Criticality: Unknown
URL: sparklemotion/nokogiri#1473
Title: Denial of service or RCE from libxml2 and libxslt
Solution: upgrade to >= 1.6.8

Vulnerabilities found!
```

## Solution:

Run `bundle update nokogiri`
  • Loading branch information
Graysonwright committed Jun 14, 2016
1 parent 8b73762 commit 570634a
Showing 1 changed file with 9 additions and 4 deletions.
13 changes: 9 additions & 4 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -118,20 +118,22 @@ GEM
mime-types (3.0)
mime-types-data (~> 3.2015)
mime-types-data (3.2016.0221)
mini_portile2 (2.0.0)
mini_portile2 (2.1.0)
minitest (5.8.4)
multipart-post (2.0.0)
neat (1.7.4)
bourbon (>= 4.0)
sass (>= 3.3)
netrc (0.11.0)
newrelic_rpm (3.15.1.316)
nokogiri (1.6.7.2)
mini_portile2 (~> 2.0.0.rc2)
nokogiri (1.6.8)
mini_portile2 (~> 2.1.0)
pkg-config (~> 1.1.7)
normalize-rails (3.0.3)
octokit (4.3.0)
sawyer (~> 0.7.0, >= 0.5.3)
pg (0.18.4)
pkg-config (1.1.7)
pry (0.10.3)
coderay (~> 1.1.0)
method_source (~> 0.8.1)
Expand Down Expand Up @@ -308,5 +310,8 @@ DEPENDENCIES
web-console
webmock

RUBY VERSION
ruby 2.3.0p0

BUNDLED WITH
1.12.3
1.12.5

0 comments on commit 570634a

Please sign in to comment.