Bundler: Bundler may install gems from a different source than expected (CVE-2013-0334)
Versions Affected: All versions < 1.7.0 Not Affected: Any Gemfile with one or zero sources Fixed Versions: 1.7.0 Releases: 1.7.0 Bundler 1.7 is a security-only release to address CVE-2013-0334, a vulnerability where a gem might be installed from an unintended source server, particularly while using both rubygems.org and gems.github.com. Impact Any Gemfile with multiple top-level source lines canno
The New Rubygems Index Format
28 Mar 2014 The New Rubygems Index Format This post is a part news, part technical documentation, and part request for comment. I’m going to explain the technical nitty-gritty details of the planned next generation index that allows Bundler and Rubygems to know what gems exist and how to install them. The current index is a mishmash of different files that were created at different times to serve
bundler environment variables | the Pickard Ayune
bundler environment variables Here are some environment variables that bundler uses. This is only the bundler-specific variables. I’m leaving out other environment variables, like RUBYOPT or PATH, that bundler uses, but that are used by other things on the system, too. There is a partial list in the bundle-config man page. Some of the values are accessed through Bundler::Settings. Any values acces
The rumors of Bundler’s death have been greatly exaggerated
07 Dec 2013 The rumors of Bundler's death have been greatly exaggerated So this week there was some excitement on Github, Hacker News, and Ruby Weekly about the news that Bundler will (eventually) be merged into Rubygems. Before that comment, which was a side point on a different topic, the idea of merging the two projects had not been announced or explained. As lead of the Bundler project, I’d li
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
The New Rubygems Index Format
hone.heroku.com | Rubygems and the Dependency API
