Update rubyzip in qa tests to version 1.3.0

723ff65b · dcouture · ef3ec224 · 723ff65b · 723ff65b
Commit 723ff65b authored Jan 30, 2020 by dcouture
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 1 deletion

changelogs/unreleased/rubyzip-qa-update.yml changelogs/unreleased/rubyzip-qa-update.yml +5 -0

qa/Gemfile.lock qa/Gemfile.lock +1 -1

No files found.
--- a/changelogs/unreleased/rubyzip-qa-update.yml
+++ b/changelogs/unreleased/rubyzip-qa-update.yml
+---
+title: Update rubyzip gem in qa tests to 1.3.0 to fix CVE-2019-16892
+merge_request:
+author:
+type: security
--- a/qa/Gemfile.lock
+++ b/qa/Gemfile.lock
@@ -94,7 +94,7 @@ GEM
      rspec-core (>= 2, < 4, != 2.12.0)
    ruby-debug-ide (0.7.0)
      rake (>= 0.8.1)
-    rubyzip (1.2.2)
+    rubyzip (1.3.0)
    selenium-webdriver (3.142.6)
      childprocess (>= 0.5, < 4.0)
      rubyzip (>= 1.2.2)