You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@taverna.apache.org by "Stian Soiland-Reyes (JIRA)" <ji...@apache.org> on 2018/01/12 18:39:00 UTC

[jira] [Created] (TAVERNA-1032) Update nokogiri dependency - security vulnerability

Stian Soiland-Reyes created TAVERNA-1032:
--------------------------------------------

             Summary: Update nokogiri dependency - security vulnerability
                 Key: TAVERNA-1032
                 URL: https://issues.apache.org/jira/browse/TAVERNA-1032
             Project: Apache Taverna
          Issue Type: Bug
          Components: Taverna Databundle Viewer
            Reporter: Stian Soiland-Reyes


GitHub has notified us that incubator-taverna-databundle-viewer has:

{quote}
Known * critical severity* security vulnerability detected in nokogiri <
1.8.1 defined in Gemfile.lock
{quote}

We don't have a incubator-taverna-databundle-viewer release yet (why?) -- so it should be easy enough to update the nokogiri version. Might have to check if other bundle dependencies also need updated.

Any Ruby volunteers..?



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)