Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade i18n #1685

Merged
merged 2 commits into from
Aug 10, 2019
Merged

Upgrade i18n #1685

merged 2 commits into from
Aug 10, 2019

Conversation

EduardoGHdez
Copy link
Contributor

@EduardoGHdez EduardoGHdez commented Aug 9, 2019

Issue#

Through bundler-audit, I see that the i18n has a security vulnerability, that has been fixed in the 0.8 version

Description:

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash Handling DoS

This address CVE-2014-10077

For more information:

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash
Handling DoS

This address CVE-2014-10077

For more information:
  * ruby-i18n/i18n#289
Copy link
Member

@vbrazo vbrazo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

True! Thanks 👍

@vbrazo vbrazo merged commit 9b55805 into faker-ruby:master Aug 10, 2019
@vbrazo
Copy link
Member

vbrazo commented Aug 10, 2019

@tindron @EduardoGHdez I've just released 2.1.1 with the i18n version update and Faker::Time rollback. Thanks guys 👍

@EduardoGHdez
Copy link
Contributor Author

Thanks!

michebble pushed a commit to michebble/faker that referenced this pull request Feb 16, 2020
* Upgrade i18n

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash
Handling DoS

This address CVE-2014-10077

For more information:
  * ruby-i18n/i18n#289

* Update faker.gemspec
davidmorton0 pushed a commit to davidmorton0/faker that referenced this pull request Jul 12, 2021
* Upgrade i18n

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash
Handling DoS

This address CVE-2014-10077

For more information:
  * ruby-i18n/i18n#289

* Update faker.gemspec
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants