From 20e2d6537d3420751d039dd3c8b4cafb1cd13266 Mon Sep 17 00:00:00 2001 From: Michael Desantis Date: Thu, 27 May 2021 17:10:22 +0000 Subject: [PATCH] updated rdoc to latest version for CVE-2021-31799 --- Dockerfile | 4 +++- hardening_manifest.yaml | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index b4955b6..10a3667 100644 --- a/Dockerfile +++ b/Dockerfile @@ -30,10 +30,12 @@ RUN cd /root/tmp && \ rpm -ivh --replacepkgs --replacefiles --force /root/tmp/dependencies/mono-complete/*.rpm && \ rm /root/tmp/owasp-dep-check-dependencies-$OWASP_DEP_CHK_VERSION.tar.gz -### Install ruby dependencies +### Install ruby dependencies and update rdoc RUN cd /root/tmp && \ gem install --force --local /root/tmp/dependencies/bundle-audit/*.gem --no-document --no-rdoc --no-ri && \ + gem install rdoc && \ gem cleanup + ### Install OWASP Dependency Check binaries RUN cd /root/tmp/dependencies/owasp && \ diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index 0a2e699..46f2c60 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -41,7 +41,7 @@ resources: url: https://github.com/boozallen/sdp-images/releases/download/dcar-2.0/owasp-dep-check-dependencies-dcar-2.0.tar.gz validation: type: sha256 - value: bd913f06fe82cc09cb9dc882397fdc921a04caf4ebc8479ec5772f2ff932c444 + value: 0bfbeedf54fea7b3633103a9e9fdc20ab1427b1a0f48921d88551717316647ec # List of project maintainers # FIXME: Fill in the following details for the current container owner in the whitelist -- GitLab