Update gem nokogiri (1.10.4->1.10.5)

This update is due to CVE-2019-13117, sparklemotion/nokogiri#1943 "Nokogiri gem, via libxslt, is affected by multiple vulnerabilities". At first blush it doesn't look like these are exploitable in our applications, but it's hard to be certain of that. Much better to just upgrade. Signed-off-by: David A. Wheeler <[email protected]>
coreinfrastructure · Nov 21, 2019 · f867db0 · f867db0
1 parent c8f9bf9
commit f867db0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -230,7 +230,7 @@ GEM
     multi_xml (0.6.0)
     multipart-post (2.1.1)
     nio4r (2.3.1)
-    nokogiri (1.10.4)
+    nokogiri (1.10.5)
       mini_portile2 (~> 2.4.0)
     oauth2 (1.4.1)
       faraday (>= 0.8, < 0.16.0)