From 48c893ee183b57b98e1519a574e0d0940e770adc Mon Sep 17 00:00:00 2001 From: Stefan Sundin Date: Wed, 6 Nov 2019 20:37:56 -0800 Subject: [PATCH] Bump rubyzip version to fix CVE-2019-16892. --- vagrant.gemspec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vagrant.gemspec b/vagrant.gemspec index 2ca4a6972..bacb03104 100644 --- a/vagrant.gemspec +++ b/vagrant.gemspec @@ -29,7 +29,7 @@ Gem::Specification.new do |s| s.add_dependency "net-scp", "~> 1.2.0" s.add_dependency "rb-kqueue", "~> 0.2.0" s.add_dependency "rest-client", ">= 1.6.0", "< 3.0" - s.add_dependency "rubyzip", "~> 1.2.2" + s.add_dependency "rubyzip", "~> 1.3" s.add_dependency "wdm", "~> 0.1.0" s.add_dependency "winrm", "~> 2.1" s.add_dependency "winrm-fs", "~> 1.0"