Update Rack to 1.6.11 to mitigate CVE-2018-16471

SeleniumHQ · Nov 19, 2018 · 9c722fa · 9c722fa
1 parent 1c1103c
commit 9c722fa
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 3 deletions.
diff --git a/rb/Gemfile.lock b/rb/Gemfile.lock
@@ -17,13 +17,14 @@ GEM
       safe_yaml (~> 1.0.0)
     diff-lcs (1.3)
     ffi (1.9.25)
+    ffi (1.9.25-x64-mingw32)
     hashdiff (0.3.7)
     parallel (1.12.0)
     parser (2.4.0.0)
       ast (~> 2.2)
     powerpack (0.1.1)
     public_suffix (2.0.5)
-    rack (1.6.8)
+    rack (1.6.11)
     rainbow (2.2.2)
       rake
     rake (12.1.0)
@@ -62,7 +63,7 @@ PLATFORMS
   x64-mingw32
 
 DEPENDENCIES
-  rack (~> 1.0)
+  rack (~> 1.0, >= 1.6.11)
   rspec (~> 3.0)
   rubocop (~> 0.50.0)
   selenium-webdriver!

diff --git a/rb/selenium-webdriver.gemspec b/rb/selenium-webdriver.gemspec
@@ -33,7 +33,7 @@ Gem::Specification.new do |s|
   s.add_runtime_dependency 'childprocess', ['~> 0.5']
 
   s.add_development_dependency 'rspec', ['~> 3.0']
-  s.add_development_dependency 'rack', ['~> 1.0']
+  s.add_development_dependency 'rack', ['~> 1.0', '>= 1.6.11']
   s.add_development_dependency 'webmock', ['~> 2.0']
   s.add_development_dependency 'yard', ['~> 0.9.11']
   s.add_development_dependency 'rubocop', ['~> 0.50.0']

diff --git a/third_party/rb/vendor/cache/rack-1.6.11.gem b/third_party/rb/vendor/cache/rack-1.6.11.gem
diff --git a/third_party/rb/vendor/cache/rack-1.6.8.gem b/third_party/rb/vendor/cache/rack-1.6.8.gem