Update rack-protection
ClosedPublic
Actions

Authored by dereckson on Sep 20 2018, 21:44.

Tags

None

Referenced Files

	F2848393: D1778.diff
	Wed, Apr 24, 19:34

	Unknown Object (File)
	Thu, Apr 18, 23:36

	Unknown Object (File)
	Thu, Apr 18, 23:33

	Unknown Object (File)
	Sun, Apr 14, 22:13

	Unknown Object (File)
	Sun, Apr 14, 22:12

	Unknown Object (File)
	Tue, Apr 9, 16:32

	Unknown Object (File)
	Tue, Apr 9, 16:32

	Unknown Object (File)
	Tue, Apr 9, 16:32

View All Files

Subscribers

None

Details

Reviewers

dereckson

Maniphest Tasks

T1444: CSRF timing attach in Sinatra rack-protection (CVE-2018-1000119)

Commits

rTOMMY9ca3ab76bdbc: Update rack-protection

Summary

Upgrade to a version with a fix for CVE-2018-1000119.

This security issue doesn't impact Tommy.

Fixes T1444.

Test Plan

Fire new Docker image

Diff Detail

Repository

rTOMMY Tommy

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Sep 20 2018, 21:44

dereckson created this revision.

Harbormaster completed remote builds in B2763: Diff 4513.Sep 20 2018, 21:44

dereckson accepted this revision.Sep 21 2018, 09:28

This revision is now accepted and ready to land.Sep 21 2018, 09:28

Closed by commit rTOMMY9ca3ab76bdbc: Update rack-protection (authored by dereckson). · Explain WhySep 21 2018, 09:56

This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

Path

Size

Gemfile.lock

2 lines

Diff 4514

View Options

Update rack-protectionClosedPublicActions