From 40bd5dea2d75aa06d5dfe78dc11316fd08a832cf Mon Sep 17 00:00:00 2001 From: Brooke Kuhlmann Date: Tue, 1 Oct 2019 17:51:03 -0600 Subject: [PATCH] Updated to Ruby 2.6.5. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Resolves several security vulnerabilities: - CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test - CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix) - CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch? - CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication [Details](https://is.gd/qWSrzR) --- .ruby-version | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.ruby-version b/.ruby-version index 2714f53..57cf282 100644 --- a/.ruby-version +++ b/.ruby-version @@ -1 +1 @@ -2.6.4 +2.6.5