Remove ruby webrick package for vulnerability (#1322)

* remove webrick package * remove webrick package
microsoft · Sep 25, 2024 · 9f68011 · 9f68011
1 parent 4f02244
commit 9f68011
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/kubernetes/linux/setup.sh b/kubernetes/linux/setup.sh
@@ -36,14 +36,17 @@ gem update time --default
 gem update uri --default
 gem update stringio --default
 gem update rexml --default
+gem update webrick --default
 mv /usr/lib/ruby/gems/3.1.0/specifications/default/time-0.2.0.gemspec /usr/lib/ruby/gems/3.1.0/specifications/default/..
 mv /usr/lib/ruby/gems/3.1.0/specifications/default/uri-0.11.0.gemspec /usr/lib/ruby/gems/3.1.0/specifications/default/..
 mv /usr/lib/ruby/gems/3.1.0/specifications/default/stringio-3.0.1.gemspec /usr/lib/ruby/gems/3.1.0/specifications/default/..
 mv /usr/lib/ruby/gems/3.1.0/specifications/default/rexml-3.2.5.gemspec /usr/lib/ruby/gems/3.1.0/specifications/default/..
+mv /usr/lib/ruby/gems/3.1.0/specifications/webrick-1.8.1.gemspec /usr/lib/ruby/gems/3.1.0/specifications/..
 gem uninstall time --version 0.2.0
 gem uninstall uri --version 0.11.0
 gem uninstall stringio --version 3.0.1
 gem uninstall rexml --version 3.2.5
+gem uninstall webrick --version 1.8.1
 
 sudo tdnf install -y azure-mdsd-1.31.4
 cp -f $TMPDIR/mdsd.xml /etc/mdsd.d