67 matches found
SUSE-SU-2015:0795-1 Security update for rubygem-bundler
The Rubygem Bundler was updated to version 1.7.0. Bundler 1.7 is a security-only release to address CVE-2013-0334, a vulnerability where a gem might be installed from an unintended source server, particularly while using both rubygems.org and gems.github.com. Upstream changes entry with more...
Fedora Update for rubygem-bundler FEDORA-2014-11649
Check the version of rubygem-bundler SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868394";...
Fedora Update for rubygem-bundler FEDORA-2014-11630
Check the version of rubygem-bundler SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868395";...
Fedora 19 : rubygem-bundler-1.7.3-1.fc19 (2014-11649)
This update fixes CVE-2013-0334: 'bundle install' may install a gem from a source other than expected Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 20 : rubygem-bundler-1.7.3-1.fc20 (2014-11630)
This update fixes CVE-2013-0334: 'bundle install' may install a gem from a source other than expected Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 21 : rubygem-bundler-1.7.3-1.fc21 (2014-11677)
This update fixes CVE-2013-0334: 'bundle install' may install a gem from a source other than expected Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected
Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source. A flaw was found in the way Bundler handled gems available from multiple sources. An attacker with access...