diff --git a/CHANGELOG.md b/CHANGELOG.md index 9bc477b..40c80ca 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,9 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html). ## [Unreleased] +### Security +- Upgrade sinatra to 2.2.3 in /tests/integration/apps/ruby to resolve CVE-2022-45442 + [cyberark/cloudfoundry-conjur-buildpack](https://github.com/cyberark/cloudfoundry-conjur-buildpack/pull/159) ## [2.2.6] - 2022-11-23 ### Changed diff --git a/tests/integration/apps/ruby/Gemfile.lock b/tests/integration/apps/ruby/Gemfile.lock index 9bf9fb8..8adda97 100644 --- a/tests/integration/apps/ruby/Gemfile.lock +++ b/tests/integration/apps/ruby/Gemfile.lock @@ -32,24 +32,24 @@ GEM mime-types-data (~> 3.2015) mime-types-data (3.2016.0521) minitest (5.16.2) - mustermann (1.1.1) + mustermann (2.0.2) ruby2_keywords (~> 0.0.1) netrc (0.11.0) rack (2.2.4) - rack-protection (2.2.0) + rack-protection (2.2.3) rack rest-client (2.0.2) http-cookie (>= 1.0.2, < 2.0) mime-types (>= 1.16, < 4.0) netrc (~> 0.8) ruby2_keywords (0.0.5) - sinatra (2.2.0) - mustermann (~> 1.0) + sinatra (2.2.3) + mustermann (~> 2.0) rack (~> 2.2) - rack-protection (= 2.2.0) + rack-protection (= 2.2.3) tilt (~> 2.0) table_print (1.5.6) - tilt (2.0.10) + tilt (2.0.11) tzinfo (2.0.5) concurrent-ruby (~> 1.0) unf (0.1.4)