Skip to content

Commit

Permalink
CHEF-15132-Updated Libraries having CVEs for upcoming WS release (#3283)
Browse files Browse the repository at this point in the history
* updated libxml2 and libarchive and gems

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* added git-windows 2.47.0

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* fixing the rdoc CVE

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* fixing the gemfile.lock issues

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* trying to update curl to 8.6.0

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* updated the signing_identity and keypair_alias for windows

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* reverted back the curl version to 8.4.0

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* updated the omnibus-sw and chef-cli gem versions to latest

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* reverted test-kitchen version

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* upgrading ruby and ruby-devkit to 3.1.6

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

* adding back the ffi

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>

---------

Signed-off-by: nikhil2611 <nikhilgupta2102@gmail.com>
  • Loading branch information
nikhil2611 authored Nov 19, 2024
1 parent 86d1adc commit 99af41a
Show file tree
Hide file tree
Showing 6 changed files with 218 additions and 203 deletions.
2 changes: 2 additions & 0 deletions components/gems/Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,8 @@ group(:omnibus_package, :development, :test) do
# The version of ruby/openssl that supports the FIPS mode of OpenSSL 3.0/3.1 is 3.2.0
# and later, hence pinning the version for openssl.
gem "openssl", ">= 3.2.0"

gem "rdoc", "~> 6.4.1" # 6.4.1.1 required for CVE-2024-27281, allow patch upgrades
end

group(:dep_selector) do
Expand Down
Loading

0 comments on commit 99af41a

Please sign in to comment.