samvera-labs / chimera

A generic, unbranded implementation of University of Michigan Research Data Repository DeepBlue
Apache License 2.0
2 stars 0 forks source link

Update gems #6

Closed fritzfreiheit closed 5 years ago

fritzfreiheit commented 5 years ago

Known moderate severity security vulnerability detected in rack >= 2.0.0, < 2.0.6 defined in Gemfile.lock.

Gemfile.lock update suggested: rack ~> 2.0.6.  -- This update includes an override of rack's tiny multipart upload buffer size ( RACK_MULTIPART_BUFFER_SIZE ), to that used in the "pinned" commit. See: https://github.com/rack/rack/issues/1075#issuecomment-256939491

fritzfreiheit commented 5 years ago

Will use code reconciliation in next sprint to fix this.