Skip to content

Commit

Permalink
Upgrade nokogiri to fix a security vulnerability
Browse files Browse the repository at this point in the history
From bundler-audit:

    Name: nokogiri
    Version: 1.6.7.2
    Advisory: CVE-2015-8806
    Criticality: Unknown
    URL: sparklemotion/nokogiri#1473
    Title: Denial of service or RCE from libxml2 and libxslt
    Solution: upgrade to >= 1.6.8
  • Loading branch information
gabebw committed Jun 7, 2016
1 parent 103847c commit cd1f4fb
Showing 1 changed file with 9 additions and 4 deletions.
13 changes: 9 additions & 4 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@ GEM
mime-types (>= 1.16, < 4)
method_source (0.8.2)
mime-types (2.99.1)
mini_portile2 (2.0.0)
mini_portile2 (2.1.0)
minitest (5.8.4)
multi_json (1.12.0)
multi_xml (0.5.5)
Expand All @@ -181,8 +181,9 @@ GEM
sass (>= 3.3)
nested_form (0.3.2)
netrc (0.11.0)
nokogiri (1.6.7.2)
mini_portile2 (~> 2.0.0.rc2)
nokogiri (1.6.8)
mini_portile2 (~> 2.1.0)
pkg-config (~> 1.1.7)
oauth2 (1.0.0)
faraday (>= 0.8, < 0.10)
jwt (~> 1.0)
Expand Down Expand Up @@ -212,6 +213,7 @@ GEM
activerecord (>= 3.1)
activesupport (>= 3.1)
arel
pkg-config (1.1.7)
pry (0.10.3)
coderay (~> 1.1.0)
method_source (~> 0.8.1)
Expand Down Expand Up @@ -453,5 +455,8 @@ DEPENDENCIES
webmock
wrapped

RUBY VERSION
ruby 2.3.1p112

BUNDLED WITH
1.11.2
1.12.4

0 comments on commit cd1f4fb

Please sign in to comment.