From 8a0c36f8d45fabed5d55f1146bce1ad118a64974 Mon Sep 17 00:00:00 2001 From: Matthias Fechner <idefix@fechner.net> Date: Fri, 31 Jan 2020 10:19:20 +0000 Subject: [PATCH] Regarding https://about.gitlab.com/releases/2020/01/30/security-release-gitlab-12-7-4-released/ rack-cors should be updated to 1.0.6, but dependency in `Gemfile` was not updated as it should. Could you apply this security related patch, please? --- Gemfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile b/Gemfile index bb486a20ce42e..4fc28069eceae 100644 --- a/Gemfile +++ b/Gemfile @@ -84,7 +84,7 @@ gem 'net-ldap' # API gem 'grape', '~> 1.1.0' gem 'grape-entity', '~> 0.7.1' -gem 'rack-cors', '~> 1.0.0', require: 'rack/cors' +gem 'rack-cors', '~> 1.0.6', require: 'rack/cors' # GraphQL API gem 'graphql', '~> 1.9.11' -- GitLab