Skip to content

Commit b6bb425

Browse files
lowellrexmd5
authored andcommitted
fix: Update omniauth gem to 1.3.2 or later 1.3.x
CVE-2017-18076 describes a bug in omniauth prior to version 1.3.2 (https://nvd.nist.gov/vuln/detail/CVE-2017-18076). This pull request upgrades the version of omniauth to 1.3.2 or later.
1 parent 0594259 commit b6bb425

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

omniauth-saml.gemspec

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Gem::Specification.new do |gem|
1313

1414
gem.required_ruby_version = '>= 2.1'
1515

16-
gem.add_runtime_dependency 'omniauth', '~> 1.3'
16+
gem.add_runtime_dependency 'omniauth', '~> 1.3', '>= 1.3.2'
1717
gem.add_runtime_dependency 'ruby-saml', '~> 1.4', '>= 1.4.3'
1818

1919
gem.add_development_dependency 'rake', '>= 10', '< 12'

0 commit comments

Comments
 (0)