Skip to content

Commit

Permalink
fix(logstash CVE): GHSA-2m96-52r3-2f3g (#27245)
Browse files Browse the repository at this point in the history
update the Gemfile template to force using the fix version of fugit gem

Signed-off-by: debasishbsws <[email protected]>
  • Loading branch information
debasishbsws authored Aug 28, 2024
1 parent b9229b0 commit 35fc293
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion logstash.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
package:
name: logstash
version: 8.15.0
epoch: 0
epoch: 1
description: Logstash - transport and process your logs, events, or other data
copyright:
- license: Apache-2.0
Expand Down Expand Up @@ -67,6 +67,7 @@ pipeline:

- name: Patch sources
runs: |
echo "gem 'fugit', '1.11.1'" >> Gemfile.template
# Disable the logstash-integration-jdbc plugin download as we build and
# package it separately
jq 'del(.["logstash-integration-jdbc"])' rakelib/plugins-metadata.json > /tmp/plugins-metadata.json
Expand Down

0 comments on commit 35fc293

Please sign in to comment.