nocebo/diaspora
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update Nokogiri to 1.6.8

Browse source 
Which in turn updates libxml2 to 2.9.4 and libxslt to 1.1.29,  addressing
a range of security issues.
See https://groups.google.com/forum/#!topic/ruby-security-ann/RCHyF5K9Lbc
for more details.
This commit is contained in:
Jonne Haß 2016-06-07 13:49:32 +02:00
parent a2864b9f40
commit 0bc8e54afd
No known key found for this signature in database
GPG key ID: F347E0EB47AC70D6
4 changed files with 15 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
Changelog.md
View file

@ -1,3 +1,9 @@
# 0.5.9.1
Update Nokogiri to 1.6.8, which in turn updates libxml2 to 2.9.4 and libxslt to 1.1.29,
addressing a range of security issues. See https://groups.google.com/forum/#!topic/ruby-security-ann/RCHyF5K9Lbc
for more details.
# 0.5.9.0
## Refactor

2
Gemfile
View file

@ -126,7 +126,7 @@ gem "messagebus_ruby_api", "1.0.3"
# Parsing
gem "nokogiri", "1.6.7.2"
gem "nokogiri", "1.6.8"
gem "redcarpet", "3.3.4"
gem "twitter-text", "1.13.3"
gem "roxml", "3.1.6"

12
Gemfile.lock
View file

@ -448,7 +448,7 @@ GEM
method_source (0.8.2)
mime-types (2.99.1)
mini_magick (4.4.0)
mini_portile2 (2.0.0)
mini_portile2 (2.1.0)
minitest (5.8.4)
mobile-fu (1.3.1)
rack-mobile-detect
@ -462,8 +462,9 @@ GEM
nenv (0.3.0)
nested_form (0.3.2)
nio4r (1.2.0)
nokogiri (1.6.7.2)
mini_portile2 (~> 2.0.0.rc2)
nokogiri (1.6.8)
mini_portile2 (~> 2.1.0)
pkg-config (~> 1.1.7)
notiffany (0.0.8)
nenv (~> 0.1)
shellany (~> 0.0)
@ -500,6 +501,7 @@ GEM
parser (2.3.0.4)
ast (~> 2.2)
phantomjs (2.1.1.0)
pkg-config (1.1.7)
powerpack (0.1.1)
pry (0.10.3)
coderay (~> 1.1.0)
@ -835,7 +837,7 @@ DEPENDENCIES
minitest
mobile-fu (= 1.3.1)
mysql2 (= 0.4.3)
nokogiri (= 1.6.7.2)
nokogiri (= 1.6.8)
omniauth (= 1.3.1)
omniauth-facebook (= 3.0.0)
omniauth-tumblr (= 1.2)
@ -908,4 +910,4 @@ DEPENDENCIES
will_paginate (= 3.1.0)
BUNDLED WITH
1.11.2
1.12.5

2
config/defaults.yml
View file

@ -4,7 +4,7 @@
defaults:
version:
number: "0.5.9.0" # Do not touch unless doing a release, do not backport the version number that's in master
number: "0.5.9.1" # Do not touch unless doing a release, do not backport the version number that's in master
heroku: false
environment:
url: "http://localhost:3000/"