Merge pull request #22 from voxpupuli/update_stringio_in_ruby27

Remove stringio 0.1.0 from ruby 2.7 and replace with 3.1
voxpupuli · Jul 8, 2024 · d1390cc · d1390cc
2 parents 00188fb + 0e954e5
commit d1390cc
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -58,6 +58,8 @@ RUN apt-get update \
     && rm -rf /usr/local/lib/ruby/gems/*/cache/* \
     && rm -rf /usr/local/lib/ruby/gems/2.7.0/gems/cgi-0.1.0.2 \
     && rm -rf /usr/local/lib/ruby/gems/2.7.0/specifications/default/cgi-0.1.0.2.gemspec \
+    && rm -rf /usr/local/lib/ruby/gems/2.7.0/gems/stringio-0.1.0 \
+    && rm -rf /usr/local/lib/ruby/gems/2.7.0/specifications/default/stringio-0.1.0.gemspec \
     && rm -rf /usr/local/lib/ruby/gems/3.2.0/gems/rdoc-6.5.0 \
     && rm -rf /usr/local/lib/ruby/gems/3.2.0/specifications/default/rdoc-6.5.0.gemspec
 

diff --git a/voxbox/Gemfile b/voxbox/Gemfile
@@ -13,5 +13,6 @@ gem 'voxpupuli-release',    ENV['RUBYGEM_VOXPUPULI_RELEASE']
 gem 'voxpupuli-test',       ENV['RUBYGEM_VOXPUPULI_TEST']
 gem 'rubocop-performance',  ENV['RUBYGEM_RUBOCOP_PERFORMANCE']
 gem 'ffi', '~> 1.16.3' # ffi 1.17.0 has change dependencies - see https://github.com/ffi/ffi/issues/1105
+gem 'stringio', '~> 3.1'    # stringio 0.1.0 has CVEs - remove default and install upstream replacement
 
 # vim: syntax=ruby