[PA-1465] Update to rubygems 2.6.13 - Puppet Tickets

XML

Word

Printable

Details

Type: Task
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: puppet-agent 1.10.9
Component/s: None
Labels:
- security

Acceptance Criteria:

Hide

Puppet-agent's vendored rubygems contains upstream fix for Rubygems CVE.

Show
Puppet-agent's vendored rubygems contains upstream fix for Rubygems CVE.
Epic Link:
2017 Security Fixes
Team:
Platform OS
Story Points:
3
Sprint:
Platform OS 2017-09-19, Platform OS 2017-10-03, Platform OS 2017-10-17, Platform OS 2017-10-31

Release Notes:
Security Fix
Release Notes Summary:

Hide
Created patches for CVE 2017 0902, 0899, 0900, and 0901 for Ruby 2.1.9. For Ruby 2.3.x and Ruby 2.4.x, the gem vulnerabilities described here were fixed when updating them to their latest versions in ~~PA-1547~~.

Show
Created patches for CVE 2017 0902, 0899, 0900, and 0901 for Ruby 2.1.9. For Ruby 2.3.x and Ruby 2.4.x, the gem vulnerabilities described here were fixed when updating them to their latest versions in PA-1547 .

QA Risk Assessment:
No Action

Description

http://blog.rubygems.org/2017/08/27/2.6.13-released.html

Attachments

Issue Links

relates to

PA-1547 Update ruby to address vulnerabilities fixed in v2.4.2

Closed

Activity

People

Assignee:: Enis Inan

Reporter:: Morgan Rhodes

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 2017/09/01 3:53 PM

Updated:: 2017/11/07 9:16 AM

Resolved:: 2017/10/18 9:58 PM

Zendesk Support