As part of the workstation release readiness checks, found that the netaddr v1.5.3 has a critical vulnerability(CVE-2019-17383). The solution was to upgrade that to 2.x, but the usage of the netaddr gem in this repo was to do CIDR operations. But version 2.x doesn't support the CIDR operation and we had to do that manually. This PR removed the netaddr gem, since that is not needed anymore and updated the CIDR code to handle manually.
Related Issue
Types of changes
[ ] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)
[ ] Chore (non-breaking change that does not add functionality or fix an issue)
Checklist:
[ ] I have read the CONTRIBUTING document.
[ ] I have run the pre-merge tests locally and they pass.
[ ] I have updated the documentation accordingly.
[ ] I have added tests to cover my changes.
[ ] If Gemfile.lock has changed, I have used --conservative to do it and included the full output in the Description above.
Description
As part of the workstation release readiness checks, found that the netaddr v1.5.3 has a critical vulnerability(CVE-2019-17383). The solution was to upgrade that to 2.x, but the usage of the netaddr gem in this repo was to do CIDR operations. But version 2.x doesn't support the CIDR operation and we had to do that manually. This PR removed the netaddr gem, since that is not needed anymore and updated the CIDR code to handle manually.
Related Issue
Types of changes
Checklist:
Gemfile.lock
has changed, I have used--conservative
to do it and included the full output in the Description above.