Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Upgrade i18n #1685

Merged
merged 2 commits into from
Aug 10, 2019
Merged

Upgrade i18n #1685

merged 2 commits into from
Aug 10, 2019

Conversation

EduardoGHdez
Copy link
Contributor

@EduardoGHdez EduardoGHdez commented Aug 9, 2019

Issue#

Through bundler-audit, I see that the i18n has a security vulnerability, that has been fixed in the 0.8 version

Description:

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash Handling DoS

This address CVE-2014-10077

For more information:

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash
Handling DoS

This address CVE-2014-10077

For more information:
  * ruby-i18n/i18n#289
Copy link
Member

@vbrazo vbrazo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

True! Thanks 👍

@vbrazo vbrazo merged commit 9b55805 into faker-ruby:master Aug 10, 2019
@vbrazo
Copy link
Member

vbrazo commented Aug 10, 2019

@tindron @EduardoGHdez I've just released 2.1.1 with the i18n version update and Faker::Time rollback. Thanks guys 👍

@EduardoGHdez
Copy link
Contributor Author

Thanks!

michebble pushed a commit to michebble/faker that referenced this pull request Feb 16, 2020
* Upgrade i18n

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash
Handling DoS

This address CVE-2014-10077

For more information:
  * ruby-i18n/i18n#289

* Update faker.gemspec
davidmorton0 pushed a commit to davidmorton0/faker that referenced this pull request Jul 12, 2021
* Upgrade i18n

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash
Handling DoS

This address CVE-2014-10077

For more information:
  * ruby-i18n/i18n#289

* Update faker.gemspec
# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants