Mirrors/inspec
2
0
Fork 0
mirror of https://github.com/inspec/inspec synced 2025-02-16 14:08:36 +00:00
Code Issues Projects Releases Packages Wiki Activity

Explicitly pin openssl to 1.0.2zi to avoid a CVE (#6825)

Browse source 
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
This commit is contained in:
Clinton Wolfe 2023-10-24 12:13:20 -04:00 • committed by GitHub
parent 56886eff1a
commit 7cec68962b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
omnibus_overrides.rb
View file

@ -5,7 +5,15 @@ train_stable = /^train \((.*)\)/.match(`gem list ^train$ --remote`)[1]
override "train", version: "v#{train_stable}"
override "ruby", version: "3.1.2"
# Mac m1
override "openssl", version: "1.1.1w" if mac_os_x?
override "ruby-msys2-devkit", version: "3.1.2-1"
# Mac Apple Silicon requires 1.1.1 series instead of 1.0.2 series
if mac_os_x?
override "openssl", version: "1.1.1w"
else
# Hopefully temporary, in October 2023 the default is 1.0.2zg which
# has an open high cve, while zi is available. Temporarily pin until
# default in omnibus-software has no cves.
override "openssl", version: "1.0.2zi"
end
override "ruby-msys2-devkit", version: "3.1.2-1"