Bundler: Bundler may install gems from a different source than expected (CVE-2013-0334)

Versions Affected: All versions < 1.7.0 Not Affected: Any Gemfile with one or zero sources Fixed Versions: 1.7.0 Releases: 1.7.0 Bundler 1.7 is a security-only release to address CVE-2013-0334, a vulnerability where a gem might be installed from an unintended source server, particularly while using both rubygems.org and gems.github.com. Impact Any Gemfile with multiple top-level source lines canno

[igrep]

早めにbundler 1.7以上にアップグレードせよ、とのこと。

[iR3]

ほ〜 “CVE-2013-0334”

[sora_h]

なるほどね (CVE振られてるから身構えたけどそこまでではない気がする)