Skip to content

Commit 3609ec4

Browse files
authored
Merge pull request wolfi-dev#68458 from efbar/feat/bump-deps-logstash91-20251009
feat(logstash-9.1): bump dep to remediate GHSA-wpv5-97wm-hp9c, GHSA-w9pc-fmgc-vxvw and GHSA-p543-xpfm-54cp
2 parents 6612649 + 2d802b4 commit 3609ec4

1 file changed

Lines changed: 5 additions & 5 deletions

File tree

logstash-9.1.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
package:
1818
name: logstash-9.1
1919
version: "9.1.5"
20-
epoch: 0
20+
epoch: 1
2121
description: Logstash - transport and process your logs, events, or other data
2222
copyright:
2323
- license: Apache-2.0
@@ -102,6 +102,10 @@ pipeline:
102102
sed -i "s/'date', '>= 3.3.3'/'date', '>= 3.4.1'/" "Gemfile.template"
103103
# Fix GHSA-c2f4-jgmc-q2r5
104104
sed -i "s/rexml (>= 3\.3\.9)/rexml (>= 3.4.2)/" "Gemfile.jruby-3.1.lock.release"
105+
# Fix GHSA-p543-xpfm-54cp, GHSA-w9pc-fmgc-vxvw and GHSA-wpv5-97wm-hp9c
106+
sed -i "s/rack (>= 3\.1\.16)/rexml (>= 3.1.17)/" "Gemfile.jruby-3.1.lock.release"
107+
echo "gem 'rack', '3.1.17'" >> Gemfile.template
108+
105109
106110
for plugin in ${{vars.separately-packaged-plugins}}
107111
do
@@ -219,10 +223,6 @@ subpackages:
219223
with:
220224
image: logstash
221225
version-path: ${{vars.major-minor-version}}/debian-12
222-
- uses: patch
223-
working-directory: "${{targets.contextdir}}"
224-
with:
225-
patches: /home/build/bitnami-semantic-version.patch
226226
- runs: |
227227
mkdir -p ${{targets.contextdir}}/opt/bitnami/logstash
228228
mkdir -p ${{targets.contextdir}}/opt/bitnami/logstash/pipeline

0 commit comments

Comments
 (0)