Package: bundler
Version: 1.1.4-6
Severity: important
Tags: security upstream patch fixed-upstream
Hi there,
the following vulnerability was published for bundler:
CVE-2013-0334: Ruby dependency manager Bundler may install gems from a
different
source than expected
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
http://www.openwall.com/lists/oss-security/2014/09/24/9
http://bundler.io/blog/2014/08/14/bundler-may-install-gems-from-a-different-source-than-expected-cve-2013-0334.html
Please adjust the affected versions in the BTS as needed.
Regards, luciano
_______________________________________________
Pkg-ruby-extras-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-ruby-extras-maintainers
