Updating Blazer to 2.6.1 (#17390)
Prior to this commit, we were seeing the following: ```console ❯ bundle exec bundle-audit check --update Updating ruby-advisory-db ... From https://github.com/rubysec/ruby-advisory-db * branch master -> FETCH_HEAD Already up to date. Updated ruby-advisory-db ruby-advisory-db: advisories: 562 advisories last updated: 2022-04-20 14:56:09 -0700 commit: 1cca55530261d16f4cd16691c1ebbae86c91c28b Name: blazer Version: 2.5.0 CVE: CVE-2022-29498 Criticality: Unknown URL: https://github.com/ankane/blazer/issues/392 Title: SQL injection for certain queries with variables Solution: upgrade to >= 2.6.0 Vulnerabilities found! ``` Blocking forem/forem#17382
This commit is contained in:
parent
92030f4798
commit
8fbc2e86d5
6 changed files with 4 additions and 4 deletions
2
Gemfile
2
Gemfile
|
|
@ -17,7 +17,7 @@ gem "addressable", "~> 2.8" # A replacement for the URI implementation that is p
|
|||
gem "ahoy_email", "~> 2.1.2" # Email analytics for Rails
|
||||
gem "ahoy_matey", "~> 4.0" # Tracking analytics for Rails
|
||||
gem "ancestry", "~> 4.1" # Ancestry allows the records of a ActiveRecord model to be organized in a tree structure
|
||||
gem "blazer", "~> 2.5.0" # Allows admins to query data
|
||||
gem "blazer", "~> 2.6" # Allows admins to query data
|
||||
gem "bootsnap", ">= 1.1.0", require: false # Boot large ruby/rails apps faster
|
||||
gem "carrierwave", "~> 2.2" # Upload files in your Ruby applications, map them to a range of ORMs, store them on different backends
|
||||
gem "carrierwave-bombshelter", "~> 0.2" # Protect your carrierwave from image bombs
|
||||
|
|
|
|||
|
|
@ -116,7 +116,7 @@ GEM
|
|||
parser (>= 2.4)
|
||||
smart_properties
|
||||
bindex (0.8.1)
|
||||
blazer (2.5.0)
|
||||
blazer (2.6.1)
|
||||
activerecord (>= 5)
|
||||
chartkick (>= 3.2)
|
||||
railties (>= 5)
|
||||
|
|
@ -157,7 +157,7 @@ GEM
|
|||
activesupport (>= 3.2.0)
|
||||
carrierwave
|
||||
fastimage
|
||||
chartkick (4.1.2)
|
||||
chartkick (4.1.3)
|
||||
childprocess (4.1.0)
|
||||
cloudinary (1.23.0)
|
||||
aws_cf_signer
|
||||
|
|
@ -954,7 +954,7 @@ DEPENDENCIES
|
|||
amazing_print (~> 1.4)
|
||||
ancestry (~> 4.1)
|
||||
better_errors (~> 2.9)
|
||||
blazer (~> 2.5.0)
|
||||
blazer (~> 2.6)
|
||||
bootsnap (>= 1.1.0)
|
||||
brakeman (~> 5.2)
|
||||
bullet (~> 7.0)
|
||||
|
|
|
|||
BIN
vendor/cache/blazer-2.5.0.gem
vendored
BIN
vendor/cache/blazer-2.5.0.gem
vendored
Binary file not shown.
BIN
vendor/cache/blazer-2.6.1.gem
vendored
Normal file
BIN
vendor/cache/blazer-2.6.1.gem
vendored
Normal file
Binary file not shown.
BIN
vendor/cache/chartkick-4.1.2.gem
vendored
BIN
vendor/cache/chartkick-4.1.2.gem
vendored
Binary file not shown.
BIN
vendor/cache/chartkick-4.1.3.gem
vendored
Normal file
BIN
vendor/cache/chartkick-4.1.3.gem
vendored
Normal file
Binary file not shown.
Loading…
Add table
Reference in a new issue