Merge pull request #11181 from stefansundin/rubyzip-v1.3.0

Bump rubyzip to v1.3.0 to fix CVE-2019-16892
This commit is contained in:
Chris Roberts 2019-11-12 13:31:11 -08:00 committed by GitHub
commit 85e34039b9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -28,7 +28,7 @@ Gem::Specification.new do |s|
s.add_dependency "net-scp", "~> 1.2.0"
s.add_dependency "rb-kqueue", "~> 0.2.0"
s.add_dependency "rest-client", ">= 1.6.0", "< 3.0"
s.add_dependency "rubyzip", "~> 1.2.2"
s.add_dependency "rubyzip", "~> 1.3"
s.add_dependency "wdm", "~> 0.1.0"
s.add_dependency "winrm", "~> 2.1"
s.add_dependency "winrm-fs", "~> 1.0"