From d5eecb78872761f3ebdcbd08216de4896dd58c45 Mon Sep 17 00:00:00 2001 From: Vitalii Parfonov Date: Mon, 25 Nov 2024 17:01:30 +0200 Subject: [PATCH] LOG-6122: update webrick lib to 1.8.2 to fix CVE-2024-47220 Signed-off-by: Vitalii Parfonov --- fluentd/Gemfile | 1 + fluentd/Gemfile.lock | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/fluentd/Gemfile b/fluentd/Gemfile index 7fb7ddb9a..bf3e2e41e 100644 --- a/fluentd/Gemfile +++ b/fluentd/Gemfile @@ -17,6 +17,7 @@ gem 'fluent-plugin-splunk-hec', '1.3.2' gem 'fluent-plugin-label-router' gem 'libxml-ruby' #aws-sdk-core gem 'typhoeus' # gems that supports elasticsearch +gem 'webrick', '1.8.2' # gems that support fluentd gem 'oj' diff --git a/fluentd/Gemfile.lock b/fluentd/Gemfile.lock index cf9a22d75..7ae8b0f83 100644 --- a/fluentd/Gemfile.lock +++ b/fluentd/Gemfile.lock @@ -280,7 +280,7 @@ GEM activesupport faraday (~> 1.7) faraday_middleware (~> 1.1) - webrick (1.8.1) + webrick (1.8.2) yajl-ruby (1.4.3) PLATFORMS @@ -319,6 +319,7 @@ DEPENDENCIES remote_syslog_sender! syslog_protocol! typhoeus + webrick (= 1.8.2) BUNDLED WITH 2.3.7